[docs] Update documentation for features from 2026-08-07

[github-actions]

Overview

Updates two reference docs to reflect current behavior of sandbox.mcp.env and the threat-detection artifact pipeline. Documentation-only change; no code modified.

Key Changes

• docs/src/content/docs/reference/environment-variables.md: Adds a new subsection, "sandbox.mcp.env validation and transport", explaining that these variables are not injected as raw export lines but transported via compiler-controlled step env vars and reconstructed as -e NAME=VALUE gateway container args at runtime (avoiding shell-injection risk). Documents the required naming pattern ^[A-Z_][A-Z0-9_]*$ and the reserved GH_AW_MCP_GATEWAY_ namespace. Updates the Sandbox MCP row description from "MCP debugging" to "MCP gateway configuration".
• docs/src/content/docs/reference/threat-detection.md: Expands the Available Artifacts section to list additional staged files detectors can access: aw-prompts/prompt-template.txt, aw-prompts/prompt-import-tree.json, aw_info.json, and restored comment-memory/*.md files. Updates Execution Order to add an explicit "Stage detection inputs" step between artifact download and pre-steps execution.

Commit

• 0c54a0c32 — [docs] update MCP env and threat detection references

Impact

Documentation clarity improvement only; reflects existing runtime behavior more accurately. No breaking changes.> Generated by PR Description Updater for #51053 · auto · 20.7 AIC · ⊞ 6.8K · ◷

[gh-aw-bot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Please confirm reviewer feedback state and hand back a concise maintainer-ready summary.

Branch refresh was requested.

Run context: https://github.com/github/gh-aw/actions/runs/31173041415

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 4.04 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Pleas...

0c54a0c is already up to date with main (ahead 1 / behind 0), so no branch refresh was needed. I found no review threads or reviewer comments to address. Local validation passed with make fmt, make lint, and make test-unit. Latest PR-branch workflow inspection showed no failed jobs; the only active check is this Copilot run, so CI on the current head is still only partially verified until it finishes.

[gh-aw-bot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Please confirm reviewer feedback state and hand back a concise maintainer-ready summary.

Branch refresh was requested.
Run context: https://github.com/github/gh-aw/actions/runs/31174860863

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 10.4 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Pleas...

0c54a0c is still up to date with main (ahead 1 / behind 0), so no branch refresh was needed. I re-checked reviewer feedback state and found no reviews, no review comments, and no unresolved threads. Local validation passed again with make fmt, make lint, and make test-unit. Latest PR checks show one prior successful Copilot run and one current Copilot run still in progress; no failed jobs are reported on the latest head.

[gh-aw-bot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Please confirm reviewer feedback state and hand back a concise maintainer-ready summary.

Branch refresh was requested.
Run context: https://github.com/github/gh-aw/actions/runs/31178251696

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 8.42 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

No failed checks are currently reported on the latest head SHA. Pleas...

0c54a0c is still up to date with main (ahead 1 / behind 0), so no branch refresh was needed. I re-checked reviewer feedback and found no reviews, no review comments, and no unresolved threads. Local validation passed again with make fmt, make lint, and make test-unit. Latest PR checks show two prior successful Copilot runs and one current Copilot run still in progress; no failed jobs are reported on the latest head.

[github-actions]

Hey! Thanks for the documentation updates. This PR looks great — you've clearly documented the new sandbox.mcp.env validation and transport behavior from #50924, plus the threat-detection staging inputs from #50914. The changes are focused, well-summarized in the PR body, and stay within reference docs as intended.

The PR is ready for review — nice work keeping the docs in sync with merged features.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• patchdiff.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "patchdiff.githubusercontent.com"

See Network Configuration for more information.

Generated by ✅ Contribution Check · auto · 56.7 AIC · ⊞ 8.7K · ◷

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.86.1