Enable strict mode for all agentic workflows

.github/workflows/artifacts-summary.md

@@ -19,6 +19,7 @@ safe-outputs:
     labels: [automation, artifacts, report]
     max: 1
 timeout_minutes: 15
+strict: true
 ---
 
 # GitHub Actions Artifacts Usage Summary

.github/workflows/changeset-generator.md

@@ -10,6 +10,7 @@ engine: claude
 safe-outputs:
   push-to-pull-request-branch:
 timeout_minutes: 10
+strict: true
 ---
 
 # Changeset Generator

.github/workflows/ci-doctor.md

@@ -20,6 +20,7 @@ tools:
   cache-memory: true
   web-fetch: null
   web-search: null
+strict: true
 ---
 # CI Failure Doctor
 

.github/workflows/cli-version-checker.md

@@ -24,6 +24,7 @@ safe-outputs:
     labels: [automation, dependencies]
     draft: true
 timeout_minutes: 15
+strict: true
 ---
 
 # CLI Version Checker

.github/workflows/dev.md

@@ -16,6 +16,8 @@ engine: claude
 safe-outputs:
     staged: true
     create-issue:
+timeout_minutes: 10
+strict: true
 ---
 
 # Poem Generator

.github/workflows/duplicate-code-detector.md

@@ -24,6 +24,9 @@ mcp-servers:
       SERENA_DOCKER: "1"
       SERENA_PORT: "9121"
       SERENA_DASHBOARD_PORT: "24282"
+    network:
+      allowed:
+        - "github.com"
     allowed:
       - activate_project
       - find_symbol
@@ -38,6 +41,7 @@ safe-outputs:
     title-prefix: "[duplicate-code] "
     labels: [code-quality, automated-analysis]
 timeout_minutes: 15
+strict: true
 ---
 
 # Duplicate Code Detection Agent

.github/workflows/go-pattern-detector.md

@@ -22,6 +22,7 @@ safe-outputs:
     title-prefix: "[ast-grep] "
     labels: [code-quality, ast-grep]
     max: 1
+strict: true
 ---
 
 # Go Code Pattern Detector

.github/workflows/issue-classifier.md

@@ -15,6 +15,7 @@ safe-outputs:
 timeout_minutes: 5
 imports:
   - shared/actions-ai-inference.md
+strict: true
 ---
 
 # Issue Classification

.github/workflows/notion-issue-summary.md

@@ -14,6 +14,8 @@ permissions:
 engine: claude
 imports:
   - shared/notion.md
+timeout_minutes: 10
+strict: true
 ---
 
 # Issue Summary to Notion

.github/workflows/pdf-summary.md

@@ -35,6 +35,7 @@ safe-outputs:
     max: 1
 
 timeout_minutes: 15
+strict: true
 ---
 
 # Resource Summarizer Agent

.github/workflows/poem-bot.md

@@ -96,6 +96,7 @@ safe-outputs:
 
 # Global timeout
 timeout_minutes: 10
+strict: true
 ---
 
 # Poem Bot - A Creative Agentic Workflow

.github/workflows/scout.md

@@ -24,6 +24,7 @@ safe-outputs:
   add-comment:
     max: 1
 timeout_minutes: 10
+strict: true
 ---
 
 # Scout Deep Research Agent

.github/workflows/technical-doc-writer.md

@@ -61,6 +61,7 @@ tools:
     - "npm run*"
 
 timeout_minutes: 10
+strict: true
 
 ---
 

.github/workflows/tidy.md

@@ -52,6 +52,7 @@ steps:
       cache: true
   - name: Dev dependencies
     run: make deps-dev
+strict: true
 ---
 
 # Code Tidying Agent