Visitar URL original
workflows: fix readiness report canary by digitarald · Pull Request #352 · microsoft/agentrc · GitHub
Skip to content

workflows: fix readiness report canary - #352

Merged
Harald Kirschner (digitarald) merged 1 commit into
mainfrom
fix/readiness-canary-runtime
Sep 20, 2026
Merged

Harald Kirschner (digitarald) merged 1 commit into
mainfrom
fix/readiness-canary-runtime

Conversation

@digitarald

Copy link
Copy Markdown
Collaborator

Summary

  • raise the readiness report turn cap from 8 to 20 after the first production canary exhausted the invocation budget
  • remove git shell permissions that the agent tried to invoke through denied cd && git ... command forms
  • require repository history and workflow inspection through the GitHub tools instead
  • regenerate the workflow lock file with gh-aw v0.88.7

Canary evidence

Run 35543828030 completed setup, build, AgentRC readiness capture, sandbox, firewall, MCP, and credential checks successfully. The agent then failed with 429 Maximum LLM invocations exceeded (8 / 8) after repeated denied shell attempts.

Validation

  • gh aw compile --approve --actionlint --no-check-update — 5/5 workflows, zero warnings
  • npm run workflows:check
  • npm run format:check

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI lite review requested due to automatic review settings September 20, 2026 23:24
@digitarald
Harald Kirschner (digitarald) merged commit c23ea02 into main Sep 20, 2026
12 checks passed
@digitarald
Harald Kirschner (digitarald) deleted the fix/readiness-canary-runtime branch September 20, 2026 23:25

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟢 Approval recommended

The changes are consistent across source and generated workflow files and correctly remove Git shell permissions while increasing the configured budget limits.

Review effort: Lite
Findings: None

What changed in this PR

Updates the AgentRC self-readiness report agentic workflow to avoid early termination in production canaries by increasing invocation/token caps and removing Git bash permissions in favor of GitHub tool inspection.

Changes:

  • Increase readiness report limits (max-turns, max-ai-credits, max-daily-ai-credits) to accommodate longer runs.
  • Remove git log / git status from allowed bash tools and explicitly instruct using GitHub tools instead.
  • Regenerate the compiled workflow lock file to reflect the updated caps and tool allowlist.
File Description
.github/​workflows/​agentrc-readiness-report.md Raises turn/credit caps and updates the task prompt to use GitHub tools (no Git via bash).
.github/​workflows/​agentrc-readiness-report.lock.yml Regenerated compiled workflow reflecting new caps and removal of git shell allowlist entries.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants