Stabilize Step Name Alignment by permitting direct manifest reads and tightening agent guidance

[Copilot]

The Step Name Alignment workflow was failing in agent with error_max_turns after repeated denied Bash attempts against /tmp/gh-aw/agent and /tmp/gh-aw/cache-memory. This change aligns tool permissions and prompt instructions so the agent can consume the prebuilt manifest without exploratory /tmp probing loops.

• Workflow permission alignment

  • Added explicit Bash allowlist entries in .github/workflows/step-name-alignment.md for direct manifest access:
    • cat /tmp/gh-aw/agent/step-alignment-input.json
    • jq* /tmp/gh-aw/agent/step-alignment-input.json

• Prompt hardening to avoid denial loops

  • Updated instructions to use the cache-memory tool directly instead of shell exploration of /tmp/gh-aw/cache-memory.
  • Added explicit manifest-read command and guidance to avoid ls/find/cp discovery scans in /tmp.

• Compiled workflow sync

  • Recompiled .github/workflows/step-name-alignment.lock.yml so runtime allowed-tools reflect the new manifest-read permissions.

tools:
  bash:
    - yq*
    - find .github/workflows -name "*.lock.yml" -type f
    - cat docs/src/content/docs/reference/glossary.md
    - cat /tmp/gh-aw/agent/step-alignment-input.json
    - jq* /tmp/gh-aw/agent/step-alignment-input.json

[Copilot]

Pull request overview

This PR aims to stop the Step Name Alignment workflow from hitting error_max_turns by (1) granting the agent explicit permission to read the prebuilt step-alignment manifest and (2) tightening prompt guidance to avoid denied /tmp probing loops.

Changes:

• Added explicit bash allowlist entries to read /tmp/gh-aw/agent/step-alignment-input.json (via cat and jq).
• Updated agent instructions to prefer the cache-memory tool and avoid exploratory /tmp scans.
• Recompiled the workflow lock file so the runtime allowed-tools list reflects the new permissions.

Show a summary per file

File	Description
.github/workflows/step-name-alignment.md	Expands agent bash allowlist and updates instructions around cache-memory + manifest consumption.
.github/workflows/step-name-alignment.lock.yml	Regenerated compiled workflow to include the new allowed-tools entries.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 1