v0.87.5

🌟 Release Highlights

This release delivers 226 merged pull requests focused on hardening the compiler, expanding safe-output tooling, and strengthening the automated linting and grading systems that keep gh-aw's self-maintaining workflows healthy.

✨ What's New

• gh aw models adds a catalog command for pricing, alias resolution, and observed automation models (#55148).
• Experimental schema-aware gh aw edit enables structured, validated editing of workflow frontmatter (#55475).
• PR steering is now available for compatible create-pull-request workflows, replacing the legacy pre-create flow (#55171, #55249, #55285, #55250).
• daily-storify workflow adds episode-based daily narrative analysis (#55248), and a new daily harness experiment proposer automates experiment ideation (#55120).
• Generated footers now render the agentic engine used and improved spacing/consistency (#55192, #55372).
• Added secret-scanning-alerts permission scope and attestations/models permission documentation (#54904, #54856).
• New drive-backed workflow memory support for persistent state across runs (#54662, #54892).

🐛 Bug Fixes & Improvements

• Fixed Codex credential check crashes and 401 errors by disabling WebSocket transport (#55106, #55089).
• Hardened Cloud Hypervisor sandboxing: fixed Copilot SDK crashes and cache-memory write failures (#55495, #55427).
• Corrected conclusion job permission derivation and skip-dominated workflow health metrics (#55529, #54729).
• Fixed github-discussion-query payload scaling to avoid jq argument growth (#55560).
• Improved MCP CLI wrapper script permissions (0o700 instead of 0o755) for tighter security (#55587).
• Numerous CodeQL and static-analysis findings addressed, including allocation-size guards and actionlint fixes (#55480, #55011).

🔧 Internal & Quality

• Continued rollout of custom linters (eslint-factory rules, Go analyzers) catching duplicate scene IDs, unsafe string fallbacks, path-join misuse, and more across the codebase.
• Large-scale test parallelization effort (t.Parallel()) applied across dozens of Go test files to speed up CI.
• Ongoing refactors split oversized files (awf_config.go, progress.go, safe-output handler registries) into focused modules for maintainability.
• Migrated dozens of internal agentic workflows to sandboxed/codex engine runtimes for improved isolation.

📚 Documentation

• Unbloated and refreshed docs for custom agents, GitHub tools reference, glossary, and frontmatter conventions.
• Clarified quick-start install instructions and cache-memory retention semantics.

No community-labeled issues were closed in this release window.

Generated by 🚀 Release · copilot · auto · 28.1 AIC · ⊞ 11.8K

---

What's Changed

• [test-parallel] Add t.Parallel() to TestExtractGitHubToolsets by @github-actions[bot] in #54723
• Fix skip-dominated workflow health metrics by @pelikhan with @Copilot in #54729
• Normalize mixed-type workflow run IDs by @pelikhan with @Copilot in #54731
• Add accessible name to docs home logo link by @pelikhan with @Copilot in #54748
• Fix sync exec timeout detection for defaulted option spreads by @pelikhan with @Copilot in #54749
• lenstringzero: report the actual expression in diagnostic messages by @pelikhan with @Copilot in #54721
• Make error-message lint advisory by @pelikhan with @Copilot in #54800
• Rename panic-in-library-code internals for intent-driven discoverability by @pelikhan with @Copilot in #54795
• Fix impacted test selection under shallow (fetch-depth 1) checkouts by @pelikhan with @Copilot in #54793
• Make Serena Go workflows mount runner tool cache for in-container go resolution by @pelikhan with @Copilot in #54794
• Detect ternary-selected HTTP module bindings by @pelikhan with @Copilot in #54796
• Add experimental drive-backed workflow memory by @pelikhan with @Copilot in #54662
• [purelock] Lock down hasOpenShellArithmeticExpression, parseClaudeJSONArrayBuffer, parseEventTypes with pure-function test suite
  [Content t by @github-actions[bot] in https://github.com//pull/54797
• Clarify cache-memory defaults and retention semantics by @pelikhan with @Copilot in #54805
• Ignore ADR changes in docs workflow by @pelikhan with @Copilot in #54808
• Skip built-in framework jobs when creating conclusion failed-jobs issues by @pelikhan with @Copilot in #54809
• [dead-code] chore: remove dead functions — 1 function removed by @github-actions[bot] in #54835
• Validate drive-memory disk-size syntax at compile time and suggest 100M by @pelikhan with @Copilot in #54831
• Fix Dependabot ignores for gh-aw action subpaths by @pelikhan with @Copilot in #54812
• Give stringbytesroundtrip.isExactString its own exactness logic by @pelikhan with @Copilot in #54722
• Unify job-name normalizers and split grab-bag stringutil.go by @pelikhan with @Copilot in #54702
• Split threat_detection_test.go, copilot_engine_test.go, maintenance_workflow_test.go by functional area by @pelikhan with @Copilot in #54681
• ci: resolve base commit so golangci-lint runs incrementally on PRs by @pelikhan with @Copilot in #54844
• Compute orphan-rate baseline dynamically in copilot-session-insights by @pelikhan with @Copilot in #54842
• Refresh GitHub Actions schema and preserve drives permission by @pelikhan with @Copilot in #54845
• Reuse shared workflow types for Copilot setup scaffolding by @pelikhan with @Copilot in #54804
• Refactor overlong functions in pkg/console/progress.go and pkg/cli/mcp_tools_privileged.go by @pelikhan with @Copilot in #54705
• Harden setup JavaScript input and I/O boundaries by @pelikhan with @Copilot in #54691
• Centralize safe-output footer configuration by @pelikhan with @Copilot in #54703
• parser: adopt structured duplicate-name validation errors for inline skills and sub-agents by @pelikhan with @Copilot in #54715
• Split CGO unit tests into 5 shards by @pelikhan with @Copilot in #54848
• Refactor compiler job assembly by @pelikhan with @Copilot in #54847
• Introduce a shared Finding/SeverityLevel type across scanner integrations by @pelikhan with @Copilot in #54690
• Add initial deterministic trace grading framework by @pelikhan with @Copilot in #54678
• Fix SC2015 ambiguous shell pattern in generated firewall log copy step by @pelikhan with @Copilot in #54747
• Introduce typed enums for workflow fixed-value fields by @pelikhan with @Copilot in #54803
• Bound generated agent and detection jobs with configurable timeouts by @pelikhan with @Copilot in #54816
• Document attestations, models, and secret-scanning-alerts permission scopes by @pelikhan with @Copilot in #54856
• Re-diagnose q workflow success rate as command gating, not execution failure by @pelikhan with @Copilot in #54854
• Prevent compute_text log output from triggering GitHub Actions error annotations by @pelikhan with @Copilot in #54870
• Address daily SPDD spec compliance gaps by @pelikhan with @Copilot in #54853
• Add custom engine implementation skill by @pelikhan with @Copilot in #54874
• Fix samples-mode replay: forward workflow input env vars and stop server.error crash by @dsyme with @Copilot in #54814
• Instructions: prefer built-in skills:/plugins: frontmatter over on-the-fly installs by @pelikhan with @Copilot in #54880
• Add daily Primer-styled documentation diagram workflow by @pelikhan with @Copilot in #54873
• Enforce positive-integer jobs.*.timeout-minutes in compiled lock files by @pelikhan with @Copilot in #54884
• Bump default gh-aw-firewall (AWF) version to v0.28.5 by @lpcox with @Copilot in #54894
• Add secret-scanning-alerts to workflow permissions schema by @pelikhan with @Copilot in #54904
• Unify safe-output outcome status enums by @pelikhan with @Copilot in #54846
• Unify create-* close-older fields via shared CloseOlderConfig embed by @pelikhan with @Copilot in #54656
• Add shared long-horizon memory workflow by @pelikhan with @Copilot in #54892
• Migrate 37 more agentic workflows to sandbox agent runtimes by @pelikhan with @Copilot in #54918
• Add open-pull-request repository skill for cloud-agent PR publication by @pelikhan with @Copilot in #54922
• Fix --use-samples replay for call/dispatch workflow tools and enable replace-label sample schema by @dsyme with @Copilot in #54813
• Align AWF filesystem.allowWrite tests with reverted default firewall version by @pelikhan with @Copilot in #54930
• [WIP] Fix failing GitHub Actions job Integration: Workflow Misc Part 2 by @pelikhan with @Copilot in #54931
• Advertise typed workflow safe-output tools by @pelikhan with @Copilot in #54817
• Avoid rewriting unchanged devcontainer config during init by @pelikhan with @Copilot in #54925
• Add regression test diffing permissions.go constants against permissions schema enum by @pelikhan with @Copilot in #54928
• Refactor Working-Set Rebuild Factor as a built-in grader by @pelikhan with @Copilot in #54934
• Treat non-waiting workflow runs as skipped in approve_workflow_run by @pelikhan with @Copilot in #54895
• Add 1-hour cooldown to PR triage agent by @pelikhan with @Copilot in #54948
• Warn Claude Code users that local OAuth tokens are ignored by @pelikhan with @Copilot in #54951
• Fix engine/permission detection in lockfile-stats analyzer by @pelikhan with @Copilot in #54950
• Update smoke-ci workflow to use samples mode instead of custom scripts by @pelikhan with @Copilot in #54836
• [docs] docs: unbloat github tools reference by @github-actions[bot] in #54947
• Make generated artifact downloads resilient to missing optional artifacts by @pelikhan with @Copilot in #54900
• Instrument CGO unit test jobs with actions/upload-code-coverage by @pelikhan with @Copilot in #54958
• Add grader-aware experiment analysis by @pelikhan with @Copilot in #54936
• Allowlist Smoke Claude Chromium service domains by @pelikhan with @Copilot in #54975
• Add inline YAML fix example to persist-credentials compile error by @pelikhan with @Copilot in #54957
• [community] Update community contributions in README by @github-actions[bot] in #54971
• [compiler-threat-spec] Daily compiler threat spec audit — add CTR-026 (generated job timeout expression injection) by @github-actions[bot] in #54973
• [docs] docs: fix American English spelling in frontmatter reference by @github-actions[bot] in #54979
• Expose replace-island for pull request updates by @pelikhan with @Copilot in #54961
• Detect += "/" manual path concatenation by @pelikhan with @Copilot in #54986
• Add safe coverage artifact upload guidance by @pelikhan with @Copilot in #54875
• [test-parallel] Parallelize safe Go codemod tests (t.Parallel batch) by @github-actions[bot] in #54988
• Harden MCP gateway startup failure diagnostics by @pelikhan with @Copilot in #54956
• Use path.Join for repo slug construction in gitutil and repoutil by @pelikhan with @Copilot in #54976
• Add deterministic experiment decisions by @pelikhan with @Copilot in #54978
• Refactor agentdrain event processing pipeline by @pelikhan with @Copilot in #54977
• [docs] Update dictation skill instructions by @github-actions[bot] in #55008
• Normalize malformed newline-combined PR title/body safe-output payloads by @pelikhan with @Copilot in #54990
• Detect concatenated and aliased caught errors by @pelikhan with @Copilot in #55018
• Exclude never-dispatched action_required runs from executed-run metrics by @pelikhan with @Copilot in #54992
• eslint-factory: detect setFailed→exit(0) across nested block boundaries by @pelikhan with @Copilot in #55031
• Clarify install method and confirm frontmatter definition in Quick Start Guide by @pelikhan with @Copilot in #55030
• Document intentional strings.Join usage in gitutil/repoutil (LintMonster path-join finding) by @pelikhan with @Copilot in #55029
• Fix unhandled response error listener in fetchUrlContent (runtime_import.cjs) by @pelikhan with @Copilot in #55012
• Allowlist npm registry for daily-security-red-team workflow by @pelikhan with @Copilot in #55036
• Promote proven require-http-response-error-listener lint rule to error severity by @pelikhan with @Copilot in #55034
• [test-parallel] test: parallelize safe Go test (daily batch) by @github-actions[bot] in #55047
• Fix TYPE-013 conformance checker false positives for approve_workflow_run by @pelikhan with @Copilot in #55044
• [instructions] instructions: sync instruction files with release v0.87.4 by @github-actions[bot] in #55049
• Add validationerror package specification by @pelikhan with @Copilot in #55083
• Add Claude and Codex credential checks by @pelikhan with @Copilot in #55089
• Rename testdata functions in panic-in-library-code linter for clarity by @pelikhan with @Copilot in #55090
• Allowlist Go module proxy for Daily Safe Output Integrator and Documentation Unbloat workflows by @pelikhan with @Copilot in #55093
• Investigate and harden PureLock coverage safe-output pathing for PR #55077 by @pelikhan with @Copilot in #55094
• Add standardized error code to safe-outputs-mcp-server port validation by @pelikhan with @Copilot in #55041
• Fix credentials-check workflow: replace unsupported --max-tokens flag for claude CLI by @pelikhan with @Copilot in #55095
• Use fmt.Fprint(os.Stdout, ...) instead of bare fmt.Print in status_command.go/view_command.go by @pelikhan with @Copilot in #55091
• Fix actionlint static-analysis findings in generated workflows by @pelikhan with @Copilot in #55011
• Fix getErrorMessage() to avoid leaking "[object Object]" for non-string message fields (MCE-006) by @pelikhan with @Copilot in #55042
• [eslint-miner] eslint-factory: add no-string-fallback-for-non-string-message rule by @github-actions[bot] in #55052
• docs: document the MCE-006 repair and lint-rule follow-up by @pelikhan with @Copilot in #55098
• Add issue: tracking field to 4 near-ready A/B experiments by @pelikhan with @Copilot in #55103
• [purelock] Lock down validateGitHubAppJSON, hasNodeRuntimeRunInstallScripts, extractAmbientContextMetrics with pure-function tes
  [Content t by @github-actions[bot] in https://github.com//pull/55077
• Add deterministic experiment adjudication to analysis by @pelikhan with @Copilot in #55039
• Synchronize experiment decision engine documentation by @pelikhan with @Copilot in #55108
• Fix Codex credential check 401 by disabling WebSocket transport by @pelikhan with @Copilot in #55106
• Tighten SPDD spec traceability: pin-drift guard, OTel coverage map, and compliance doc sync by @pelikhan with @Copilot in #55116
• Add daily harness experiment proposer workflow by @pelikhan with @Copilot in #55120
• Add formal test suite for threat-detection suppression lifecycle and rule deprecation policy by @pelikhan with @Copilot in #55111
• [test-parallel] test: add t.Parallel() to safe tests in pkg/cli (batch 25) by @github-actions[bot] in #55118
• Consolidate jsonutil tests into a single table-driven test with error path coverage by @pelikhan with @Copilot in #55125
• Enable GitHub-hosted inference for Codex by @pelikhan with @Copilot in #54606
• CI: shallow fetch for stale lock file check workflow by @pelikhan with @Copilot in #55138
• Migrate 30 copilot workflows to codex engine + copilot/mai-code-1-flash-picker by @pelikhan with @Copilot in #55154
• Replace proximity-grep secret-in-outputs check with a deterministic YAML-parsing test by @pelikhan with @Copilot in #55151
• Fix default toolsets doc target in MCP tools report workflow by @pelikhan with @Copilot in #55142
• [test-parallel] test: add t.Parallel() to safe Go tests in pkg/cli (batch after firewall_log_test.go) by @github-actions[bot] in #55135
• [safe-output-integrator] Add safe-output coverage for upload-code-coverage by @github-actions[bot] in #55144
• Name guard policy in smoke-agent failure notifications by @pelikhan with @Copilot in #55143
• Count nested engine declarations in docs review report by @pelikhan with @Copilot in #55141
• Reduce ambient context cost in high-volume workflows by @pelikhan with @Copilot in #55162
• Remove outdated socials campaign by @pelikhan with @Copilot in #55159
• [caveman] Optimize instruction verbosity — triggers.md (2026-08-23) by @github-actions[bot] in #55167
• [test-parallel] test: add t.Parallel() to safe table-driven subtests in pkg/cli by @github-actions[bot] in #55164
• Add gh aw models for catalog pricing, alias resolution, and observed automation models by @pelikhan with @Copilot in #55148
• Surface Copilot SDK startup stderr on pre-ready crashes by @pelikhan with @Copilot in #55149
• Add daily-trajectory-grader-implementer: ships 25 ranked trajectory graders one per run by @pelikhan with @Copilot in #55174
• Allow automatic pull request review dismissal ingestion by @dsyme with @Copilot in #55180
• Add regression coverage for call_workflow samples replay workflow identity by @dsyme with @Copilot in #55179
• Add focused validation guidance to the developer skill by @pelikhan with @Copilot in #55187
• Fix archivx upload_artifact staging and add diagram-design skill by @pelikhan with @Copilot in #55189
• Remove GitHub App usage from Daily Harness Experiment Proposer by @pelikhan with @Copilot in #55190
• [test-parallel] Parallelize safe Go tests in pkg/cli (batch) by @github-actions[bot] in #55188
• [test-parallel] test: add t.Parallel() to safe pkg/cli MCP tests by @github-actions[bot] in #55206
• Fix lockfile-stats discussion category extraction and add loud self-check by @pelikhan with @Copilot in #55209
• Render agentic engine in generated footers by @pelikhan with @Copilot in #55192
• Align daily workflow and merged-PR metrics by @pelikhan with @Copilot in #55214
• Add pre-create pull request steering by @pelikhan with @Copilot in #55171
• Update detection analysis report to reflect gh-aw-detection default-on by @pelikhan with @Copilot in #55236
• [community] Update community contributions in README by @github-actions[bot] in #55242
• [test-parallel] test: add t.Parallel() to safe pkg/cli test cases (batch) by @github-actions[bot] in #55238
• [blog] Weekly blog post – 2026-08-24 by @github-actions[bot] in #55246
• Enable PR steering for compatible create-pull-request workflows by @pelikhan with @Copilot in #55249
• Add daily-storify workflow for episode-based daily narrative analysis by @pelikhan with @Copilot in #55248
• Align compiler with gh-aw-firewall v0.28.6 (Cloud Hypervisor filesystem.allowWrite support) by @lpcox with @Copilot in #55172
• Close pre-created steer PRs only when create_pull_request does not consume them by @pelikhan with @Copilot in #55250
• Fix shared codex MCP gh-aw binary resolution in setup-cli path by @pelikhan with @Copilot in #55207
• Implement state revisit probability trajectory grader by @pelikhan with @Copilot in #55235
• ssljson: detect duplicate scene/step IDs and dangling step scene_id references by @pelikhan with @Copilot in #55273
• [spec-review] Update Safe Outputs conformance checker for recent spec changes by @github-actions[bot] in #55274
• Refactor remote dispatch workflow fetching by @pelikhan with @Copilot in #55253
• [avenger] Fix missing pull-requests permission in pre-create experimental warning test by @github-actions[bot] in #55277
• Enable generatedyamlheredoc custom linter in CI by @pelikhan with @Copilot in #55316
• Handle read-only awf-reflect persistence failures without aborting agent startup by @pelikhan with @Copilot in #55271
• Replace create-pull-request pre-create with steer (no legacy support) by @pelikhan with @Copilot in #55285
• Pin Serena MCP image to 1.7.0 and record risk acceptances for unfixed upstream CVEs by @pelikhan with @Copilot in #55322
• Add generated-by footer to steering pull requests by @pelikhan with @Copilot in #55287
• Exempt narrowed containers from string fallback rule by @pelikhan with @Copilot in #55302
• [docs] Update glossary - weekly full scan by @github-actions[bot] in #55359
• [WIP] [eslint-miner] ESLint Miner: work in progress by @github-actions[bot] in #55342
• Fix update-pull-request generated footer spacing by @pelikhan with @Copilot in #55372
• Strip provider prefix when reducing model names for footers by @pelikhan with @Copilot in #55390
• feat: add value grader by @mnkiefer in #55155
• [blog] Agent of the Day – 2026-08-24 by @github-actions[bot] in #55420
• Fix cache-memory writes under Cloud Hypervisor sandboxing by @lpcox with @Copilot in #55427
• Add formal CTR-026 timeout validation coverage by @pelikhan with @Copilot in #55437
• [ci-coach] fix: mock GitHub API in TestHealthConfigValidation to prevent pkg/cli test timeout by @github-actions[bot] in #55411
• [test-parallel] Add t.Parallel() to safe tests in pkg/cli (batch after packages_test.go) by @github-actions[bot] in #55402
• [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in #55418
• [test-parallel] test: add t.Parallel() to safe read-only workflow contract tests by @github-actions[bot] in #55450
• Report new agent failure issues on steer PRs by @pelikhan with @Copilot in #55384
• [q] Switch Daily Storify mined-loop persistence from cache-memory to repo-memory by @pelikhan with @Copilot in #55394
• Add raw MCP canary to remote auth workflow by @pelikhan with @Copilot in #55396
• test: add graders command integration coverage by @pelikhan with @Copilot in #55443
• Move Copilot vendor API and telemetry domains out of engine defaults by @pelikhan with @Copilot in #55382
• Treat the AWF proxy's HTTP 403 max-AI-credits rejection as trusted budget-abort evidence by @pelikhan with @Copilot in #55241
• Harden operational-value grader execution and make evaluator timeouts configurable by @pelikhan with @Copilot in #55445
• Fix Linter Miner unavailable sub-agent model by @pelikhan with @Copilot in #55459
• Add prefer-actions-exec-over-child-process ESLint rule by @pelikhan with @Copilot in #55458
• Address SPDD safe-output spec gaps by @pelikhan with @Copilot in #55441
• [test-parallel] test: add t.Parallel() to safe top-level tests in pkg/cli (batch) by @github-actions[bot] in #55472
• Fix spread-options false positive in require-getexecoutput-exitcode-check by @pelikhan with @Copilot in #55497
• Centralize engine default domain sets by @pelikhan with @Copilot in #55461
• [test-parallel] test: add t.Parallel() to safe cli tests (batch) by @github-actions[bot] in #55506
• Preserve quoted cron expressions in frontmatter updates by @pelikhan with @Copilot in #55502
• Fix add-wizard existing Copilot token flow by @dsyme in #55438
• Split safe outputs handler registry by domain by @pelikhan with @Copilot in #55482
• Add workflow documentation URL frontmatter by @pelikhan with @Copilot in #55474
• Add experimental schema-aware gh aw edit by @pelikhan with @Copilot in #55475
• Fix Copilot SDK crashes in Cloud Hypervisor by @pelikhan with @Copilot in #55495
• Improve test coverage and assertions in pkg/cli/logs_firewall_parse_test.go by @pelikhan with @Copilot in #55522
• Warn when Copilot session telemetry is unavailable by @pelikhan with @Copilot in #55534
• Split safe-output handler registry by category by @pelikhan with @Copilot in #55501
• Deduplicate token-usage and integrity-level types flagged by Typist by @pelikhan with @Copilot in #55518
• Guard allocation size calculations flagged by CodeQL by @pelikhan with @Copilot in #55480
• Validate pre-created PR branch before privileged checkout by @pelikhan with @Copilot in #55481
• Fix conclusion job issues permission derivation by @pelikhan with @Copilot in #55529
• Fix manual PR-recreation instructions to match actual git transport (bundle vs patch) by @dsyme with @Copilot in #55510
• [test-parallel] test(cli): add t.Parallel() to safe tests in pkg/cli by @github-actions[bot] in #55537
• Split pkg/workflow/awf_config.go into types / schema / build / policy files by @pelikhan with @Copilot in #55496
• Reduce Design Decision Gate ambient context by @pelikhan with @Copilot in #55533
• Pipe threat-detection kill-switch frontmatter into compiled threat-detect invocation by @pelikhan with @Copilot in #55532
• [test-parallel] test: add t.Parallel() to safe tests in pkg/cli, pkg/colorwriter, pkg/console by @github-actions[bot] in #55558
• Add node ecosystem preset to network.allowed for Daily Documentation Diagram by @pelikhan with @Copilot in #55561
• Update Archivx to publish diagrams through pull requests by @pelikhan with @Copilot in #55563
• [docs] docs: unbloat Copilot custom agents reference by @github-actions[bot] in #55549
• Fix github-discussion-query payload scaling by eliminating jq argument growth by @pelikhan with @Copilot in #55560
• Codex harness: add working-set rebuild circuit breaker to stop runaway context loops by @pelikhan with @Copilot in #55562
• Fix Daily Team Evolution title date to derive from window_start, not run date by @pelikhan with @Copilot in #55573
• Pin deterministic git-scoped cloc invocation in Daily Code Metrics workflow by @pelikhan with @Copilot in #55575
• Refactor ssljson.ValidateDoc to remove one largefunc backlog item by @pelikhan with @Copilot in #55588
• [test-parallel] Daily Go Test Parallelizer: add t.Parallel() to 13 test files by @github-actions[bot] in #55580
• Stabilize Daily Performance Summary 90-day metrics by @pelikhan with @Copilot in #55574
• Refactor pull request steering to use issues by @pelikhan with @Copilot in #55572
• Write MCP CLI wrapper scripts with owner-only permissions (0o700) instead of 0o755 by @pelikhan with @Copilot in #55587
• [archivx] Update workflow diagram — 2026-08-25 by @github-actions[bot] in #55622
• Add recurrence-determinism trajectory grader by @pelikhan with @Copilot in #55620
• Add Playwright readability checks to Archivx diagrams by @pelikhan with @Copilot in #55639
• Skip duplicate generated issues after unmerged Copilot PRs by @pelikhan with @Copilot in #55627
• Guard custom linter registry-to-CI enforcement drift by @pelikhan with @Copilot in #55636

New Contributors

• @pelikhan with @Copilot made their first contribution in #54922

Full Changelog: v0.87.4...v0.87.5