[deep-report] compiler_safe_outputs.go silently drops safe-outputs config on invalid JSON

[github-actions]

Description

In pkg/workflow/compiler_safe_outputs.go:27-30, a json.Unmarshal failure on an included safe-outputs config is only logged via compilerSafeOutputsLog.Printf and then silently skipped (continue) — the caller gets no indication that a config was dropped. Confirmed by reading the live file.

Expected Impact

Surfacing invalid-JSON configs (e.g. via a returned warning list, matching patterns used elsewhere in the compiler) prevents silently-dropped safe-outputs configuration from going unnoticed during compilation.

Suggested Agent

General-purpose Go agent familiar with pkg/workflow compiler conventions.

Estimated Effort

Quick (< 1 hour)

Data Source

DeepReport analysis 2026-09-06, sourced from Daily Compiler Code Quality Report discussion #58899.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by 🔬 Deep Report · claude · agent · 145.4 AIC · ⌖ 10.5 AIC · ⊞ 12.8K · ◷

• expires on Sep 7, 2026, 10:44 PM UTC-08:00