[Issue Arborist] Issue Arborist run summary

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 68

Parent issues created

None. No unparented cluster of 5+ issues lacked an existing parent.

Links created

Parent	Sub-issue	Reasoning
#2076	#2067, #2068, #2069, #2070, #2071	Listed explicitly as the five follow-ups in the parent body
#1283	#2322, #2252, #2040	Upstream release-note action-item issues (copilot-cli, awf, mcpg)
#1428	#1103, #381, #471	Safe-output tool correctness items listed in the parent body

Suggested (not linked — for maintainer review)

• [agent-issue]: Agents cannot supply work-item fields; custom-fields is compile-time only, so runtime-computed values never reach ADO #2044, [agent-issue]: Allow agent-supplied priority on work items #2354 (agent-supplied work-item fields/priority): closely related to each other. Neither is clearly broader, so no link.
• perf(compile): avoid blocking fs reads in the async compile path for the package-config check #2358, fix(compile): surface unreadable repository roots in the package-config check #2359, fix(compile): decide how the package-config check treats symlinked config files #2360 (package-config check follow-ups) and test(package-feeds): assert the cargo branch of the package-manager wrapper #2357: possible small cluster, below the 5-issue threshold.
• [aw]: Allow engine.model to be driven by an ADO pipeline variable / variable group #2035 and [agent-issue]: Mirror gh-aw's runtime model controls in ado-aw #2245 (engine model controls), and [agent-issue]: support declarative Azure DevOps pipeline variables in workflow source #2012 (declarative pipeline variables): possible overlap.
• chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156, chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041, chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027 (stale fixture recompile chores): likely closable.
• 🔴 Red Team Audit — High: link-work-items area-path target scope silently fail-opens #2261 and 🔴 Red Team Audit — High: shell(git:*) allow-tool rule permits arbitrary command execution via git -c config override #2331 (Red Team Audit): could be grouped under a security parent with 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 if more appear.

Observations

• Several existing parents ([Parent] Track agent runtime and execution pipeline improvements #1649, [Parent] MCPG infrastructure and safe-output tooling improvements #1321, [Parent] Compiler internals and pipeline generation improvements (IR types, YAML gen, prompt decoupling) #1286, [Parent] Issue Arborist - Issue Group #1284, [Parent] Track and resolve recurring agentic workflow execution failures (non-rate-limit) #1549, [Parent] Track and resolve recurring AI-credits rate-limit failures in scheduled agentic workflows #1535) are still in the not-yet-sub-issue list. Their sub-issues are mostly already linked.
• Bot-tracking issues ([aw] Detection Runs #793, [aw] No-Op Runs #13) are standing issues and were not linked.

Generated by Issue Arborist · auto · 23.1 AIC · ⊞ 5.9K · ◷

• expires on Nov 13, 2026, 8:27 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #2443.