Add actions/cache-based AIC usage cache to skip artifact downloads in daily guardrail#38856
Merged
Conversation
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot
AI
changed the title
Add actions/cache-based AIC usage cache for daily guardrail optimization
Add actions/cache-based AIC usage cache to skip artifact downloads in daily guardrail
Jun 12, 2026
Copilot created this pull request from a session on behalf of
pelikhan
June 12, 2026 15:05
View session
Contributor
There was a problem hiding this comment.
Pull request overview
This PR introduces an actions/cache-backed, per-workflow AI Credits (AIC) usage cache so the daily AIC guardrail can reuse previously computed {run_id, aic} values and avoid repeatedly downloading the same usage artifacts across activations.
Changes:
- Add a conclusion-job step sequence to compute AIC for the current run and persist it as a JSONL cache snapshot via
actions/cache/save. - Add an activation-job cache restore step (
actions/cache/restore) so the daily guardrail can load cached AIC values before inspecting candidate runs. - Extend the daily guardrail script to parse the restored JSONL cache and short-circuit artifact downloads on cache hits.
Show a summary per file
| File | Description |
|---|---|
| pkg/workflow/notify_comment.go | Adds conclusion-job steps to write/save the per-workflow AIC cache snapshot. |
| pkg/workflow/compiler_activation_job_builder.go | Prepends activation-job cache restore step before the daily AIC guardrail step. |
| actions/setup/js/write_daily_aic_usage_cache.cjs | New github-script helper to compute AIC from /tmp/gh-aw/usage and append {run_id,aic} to a JSONL cache file. |
| actions/setup/js/check_daily_aic_workflow_guardrail.cjs | Loads the restored JSONL cache and uses cached AIC values to skip artifact downloads on cache hits. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden | Updates golden workflow output to include cache restore step in activation job. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden | Updates golden workflow output to include cache restore step in activation job. |
| .github/workflows/weekly-issue-summary.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/unbloat-docs.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/test-create-pr-error-handling.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/technical-doc-writer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/super-linter.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/step-name-alignment.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/static-analysis-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/stale-repo-identifier.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/spec-extractor.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/spec-enforcer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-update-cross-repo-pr.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-pi.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-gemini.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-copilot.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-copilot-arm.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-copilot-aoai-entra.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-copilot-aoai-apikey.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-codex.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-claude.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/smoke-antigravity.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/slide-deck-maintainer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/scout.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/schema-feature-coverage.lock.yml | Adds restore/save cache steps (and manifest pins) to the locked workflow output. |
| .github/workflows/schema-consistency-checker.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/safe-output-health.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/repository-quality-improver.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/repo-audit-analyzer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/refactoring-cadence.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/python-data-charts.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/prompt-clustering-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/poem-bot.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/pdf-summary.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/outcome-collector.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/org-health-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/mcp-inspector.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/lockfile-stats.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/linter-miner.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/jsweep.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/instructions-janitor.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/gpclean.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/go-logger.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/go-fan.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/glossary-maintainer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/github-remote-mcp-auth-test.lock.yml | Adds restore/save cache steps (and manifest pins) to the locked workflow output. |
| .github/workflows/github-mcp-tools-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/github-mcp-structural-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/firewall-escape.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/developer-docs-consolidator.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/deep-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/dead-code-remover.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/dataflow-pr-discussion-dataset.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-spdd-spec-planner.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-security-red-team.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-security-observability.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-safe-output-optimizer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-repo-chronicle.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-rendering-scripts-verifier.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-performance-summary.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-news.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-mcp-concurrency-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-issues-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-hippo-learn.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-function-namer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-formal-spec-verifier.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-fact.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-experiment-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-doc-updater.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-doc-healer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-compiler-quality.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-code-metrics.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-caveman-optimizer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-cache-strategy-analyzer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-aw-cross-repo-compile-check.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/daily-architecture-diagram.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-session-insights.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-pr-prompt-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-pr-nlp-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-pr-merged-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-opt.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/copilot-agent-analysis.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/constraint-solving-potd.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/codex-github-remote-mcp-test.lock.yml | Adds restore/save cache steps (and manifest pins) to the locked workflow output. |
| .github/workflows/code-scanning-fixer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/cloclo.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/cli-version-checker.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/claude-code-user-docs-review.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/ci-doctor.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/ci-coach.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/chaos-pr-bundle-fuzzer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/audit-workflows.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/api-consumption-report.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/agent-persona-explorer.lock.yml | Adds restore/save cache steps to the locked workflow output. |
| .github/workflows/ab-testing-advisor.lock.yml | Adds restore/save cache steps to the locked workflow output. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 182/258 changed files
- Comments generated: 3
Comment on lines
+704
to
+727
| sanitized := SanitizeWorkflowIDForCacheKey(data.WorkflowID) | ||
| cacheKey := fmt.Sprintf("agentic-workflow-usage-%s-${{ github.run_id }}", sanitized) | ||
| return []string{ | ||
| " - name: Write daily AIC usage cache entry\n", | ||
| " id: write-daily-aic-cache\n", | ||
| " if: always()\n", | ||
| " continue-on-error: true\n", | ||
| fmt.Sprintf(" uses: %s\n", pinAction("actions/github-script")), | ||
| " with:\n", | ||
| " github-token: ${{ github.token }}\n", | ||
| " script: |\n", | ||
| " const { setupGlobals } = require('" + SetupActionDestination + "/setup_globals.cjs');\n", | ||
| " setupGlobals(core, github, context);\n", | ||
| " const { main } = require('" + SetupActionDestination + "/write_daily_aic_usage_cache.cjs');\n", | ||
| " await main();\n", | ||
| " - name: Save daily AIC usage cache\n", | ||
| " id: save-daily-aic-cache\n", | ||
| " if: always()\n", | ||
| " continue-on-error: true\n", | ||
| fmt.Sprintf(" uses: %s\n", pinAction("actions/cache/save")), | ||
| " with:\n", | ||
| fmt.Sprintf(" key: %s\n", cacheKey), | ||
| " path: /tmp/gh-aw/agentic-workflow-usage-cache.jsonl\n", | ||
| } |
Comment on lines
+64
to
+67
| const usageFiles = findJSONLFiles(USAGE_DIR); | ||
| logCache("Scanning usage JSONL files", { dir: USAGE_DIR, count: usageFiles.length, files: usageFiles }); | ||
| const aic = sumAICFromUsageJSONLFiles(usageFiles); | ||
| logCache("Computed AIC for current run", { runId, aic }); |
Comment on lines
+95
to
+99
| /** | ||
| * Loads the per-workflow usage cache from the JSONL file restored by the activation job's | ||
| * cache-restore step. Each line is a JSON object `{ run_id: number, aic: number }`. | ||
| * | ||
| * Returns a `Map<runId, aic>` so that callers can check whether a prior run's AIC is already |
Contributor
|
@copilot refresh the branch and summarize any remaining blockers.
|
Contributor
|
``
|
Contributor
|
``
|
Collaborator
|
@copilot run pr-finisher skill |
…AIC, add loadAICUsageCache tests Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
Author
Done in 25f41a1. Three review issues addressed:
|
Contributor
|
@copilot refresh branch and rerun checks, then post a short blocker summary.
|
Contributor
|
🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨ |
Contributor
|
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 |
Contributor
|
|
Contributor
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
Contributor
|
📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing... |
Contributor
|
PR: Add actions/cache-based AIC usage cache to skip artifact downloads in daily guardrail Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Contributor
|
Smoke Test: 8/15 passed. Overall FAIL. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Contributor
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall Status: PASS
|
This was referenced Jun 12, 2026
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
💥 [THE END] — Illustrated by Smoke Claude · 58 AIC · ⌖ 8.97 AIC · ⊞ 8.1K
| "gh-aw": patch | ||
| --- | ||
|
|
||
| Added an `actions/cache`-backed AIC usage cache to avoid repeated artifact downloads when the daily guardrail rechecks the same workflow runs. |
Contributor
There was a problem hiding this comment.
Smoke test: Clear changeset description for the AIC usage cache. 👍
| @@ -0,0 +1,5 @@ | |||
| --- | |||
| "gh-aw": patch | |||
Contributor
There was a problem hiding this comment.
Smoke test: patch-level changeset looks appropriate here.
Contributor
|
Smoke Test: FAIL
Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Contributor
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Contributor
|
PR: Add actions/cache-based AIC usage cache to skip artifact downloads in daily guardrail Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Collaborator
|
@copilot merge main and recompile |
…for-ai-metrics # Conflicts: # .github/workflows/ace-editor.lock.yml # .github/workflows/agent-performance-analyzer.lock.yml # .github/workflows/agentic-token-audit.lock.yml # .github/workflows/agentic-token-optimizer.lock.yml # .github/workflows/agentic-token-trend-audit.lock.yml # .github/workflows/ai-moderator.lock.yml # .github/workflows/approach-validator.lock.yml # .github/workflows/archie.lock.yml # .github/workflows/architecture-guardian.lock.yml # .github/workflows/artifacts-summary.lock.yml # .github/workflows/auto-triage-issues.lock.yml # .github/workflows/avenger.lock.yml # .github/workflows/aw-failure-investigator.lock.yml # .github/workflows/blog-auditor.lock.yml # .github/workflows/bot-detection.lock.yml # .github/workflows/brave.lock.yml # .github/workflows/breaking-change-checker.lock.yml # .github/workflows/changeset.lock.yml # .github/workflows/cli-consistency-checker.lock.yml # .github/workflows/codex-github-remote-mcp-test.lock.yml # .github/workflows/commit-changes-analyzer.lock.yml # .github/workflows/contribution-check.lock.yml # .github/workflows/copilot-cli-deep-research.lock.yml # .github/workflows/craft.lock.yml # .github/workflows/daily-agent-of-the-day-blog-writer.lock.yml # .github/workflows/daily-agentrx-trace-optimizer.lock.yml # .github/workflows/daily-ambient-context-optimizer.lock.yml # .github/workflows/daily-assign-issue-to-user.lock.yml # .github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml # .github/workflows/daily-awf-spec-compiler-surfacing.lock.yml # .github/workflows/daily-byok-ollama-test.lock.yml # .github/workflows/daily-choice-test.lock.yml # .github/workflows/daily-cli-performance.lock.yml # .github/workflows/daily-cli-tools-tester.lock.yml # .github/workflows/daily-community-attribution.lock.yml # .github/workflows/daily-compiler-threat-spec-optimizer.lock.yml # .github/workflows/daily-credit-limit-test.lock.yml # .github/workflows/daily-file-diet.lock.yml # .github/workflows/daily-firewall-report.lock.yml # .github/workflows/daily-geo-optimizer.lock.yml # .github/workflows/daily-malicious-code-scan.lock.yml # .github/workflows/daily-model-inventory.lock.yml # .github/workflows/daily-multi-device-docs-tester.lock.yml # .github/workflows/daily-observability-report.lock.yml # .github/workflows/daily-regulatory.lock.yml # .github/workflows/daily-reliability-review.lock.yml # .github/workflows/daily-safe-output-integrator.lock.yml # .github/workflows/daily-safe-outputs-conformance.lock.yml # .github/workflows/daily-safeoutputs-git-simulator.lock.yml # .github/workflows/daily-secrets-analysis.lock.yml # .github/workflows/daily-semgrep-scan.lock.yml # .github/workflows/daily-sentrux-report.lock.yml # .github/workflows/daily-skill-optimizer.lock.yml # .github/workflows/daily-syntax-error-quality.lock.yml # .github/workflows/daily-team-evolution-insights.lock.yml # .github/workflows/daily-team-status.lock.yml # .github/workflows/daily-testify-uber-super-expert.lock.yml # .github/workflows/daily-token-consumption-report.lock.yml # .github/workflows/daily-windows-terminal-integration-builder.lock.yml # .github/workflows/daily-workflow-updater.lock.yml # .github/workflows/delight.lock.yml # .github/workflows/dependabot-burner.lock.yml # .github/workflows/dependabot-campaign.lock.yml # .github/workflows/dependabot-go-checker.lock.yml # .github/workflows/dependabot-repair.lock.yml # .github/workflows/dependabot-worker.lock.yml # .github/workflows/deployment-incident-monitor.lock.yml # .github/workflows/design-decision-gate.lock.yml # .github/workflows/dev-hawk.lock.yml # .github/workflows/dev.lock.yml # .github/workflows/dictation-prompt.lock.yml # .github/workflows/discussion-task-miner.lock.yml # .github/workflows/docs-noob-tester.lock.yml # .github/workflows/draft-pr-cleanup.lock.yml # .github/workflows/duplicate-code-detector.lock.yml # .github/workflows/example-permissions-warning.lock.yml # .github/workflows/example-workflow-analyzer.lock.yml # .github/workflows/firewall.lock.yml # .github/workflows/functional-pragmatist.lock.yml # .github/workflows/github-remote-mcp-auth-test.lock.yml # .github/workflows/go-pattern-detector.lock.yml # .github/workflows/grumpy-reviewer.lock.yml # .github/workflows/hippo-embed.lock.yml # .github/workflows/hourly-ci-cleaner.lock.yml # .github/workflows/issue-arborist.lock.yml # .github/workflows/issue-monster.lock.yml # .github/workflows/issue-triage-agent.lock.yml # .github/workflows/layout-spec-maintainer.lock.yml # .github/workflows/lint-monster.lock.yml # .github/workflows/mattpocock-skills-reviewer.lock.yml # .github/workflows/mergefest.lock.yml # .github/workflows/metrics-collector.lock.yml # .github/workflows/necromancer.lock.yml # .github/workflows/notion-issue-summary.lock.yml # .github/workflows/objective-impact-report.lock.yml # .github/workflows/plan.lock.yml # .github/workflows/pr-code-quality-reviewer.lock.yml # .github/workflows/pr-description-caveman.lock.yml # .github/workflows/pr-nitpick-reviewer.lock.yml # .github/workflows/pr-sous-chef.lock.yml # .github/workflows/pr-triage-agent.lock.yml # .github/workflows/q.lock.yml # .github/workflows/refiner.lock.yml # .github/workflows/release.lock.yml # .github/workflows/repo-tree-map.lock.yml # .github/workflows/research.lock.yml # .github/workflows/ruflo-backed-task.lock.yml # .github/workflows/schema-feature-coverage.lock.yml # .github/workflows/security-compliance.lock.yml # .github/workflows/security-review.lock.yml # .github/workflows/semantic-function-refactor.lock.yml # .github/workflows/sergo.lock.yml # .github/workflows/smoke-agent-all-merged.lock.yml # .github/workflows/smoke-agent-all-none.lock.yml # .github/workflows/smoke-agent-public-approved.lock.yml # .github/workflows/smoke-agent-public-none.lock.yml # .github/workflows/smoke-agent-scoped-approved.lock.yml # .github/workflows/smoke-call-workflow.lock.yml # .github/workflows/smoke-ci.lock.yml # .github/workflows/smoke-copilot-sdk.lock.yml # .github/workflows/smoke-create-cross-repo-pr.lock.yml # .github/workflows/smoke-crush.lock.yml # .github/workflows/smoke-multi-pr.lock.yml # .github/workflows/smoke-opencode.lock.yml # .github/workflows/smoke-otel-backends.lock.yml # .github/workflows/smoke-project.lock.yml # .github/workflows/smoke-service-ports.lock.yml # .github/workflows/smoke-temporary-id.lock.yml # .github/workflows/smoke-test-tools.lock.yml # .github/workflows/smoke-workflow-call-with-inputs.lock.yml # .github/workflows/smoke-workflow-call.lock.yml # .github/workflows/spec-librarian.lock.yml # .github/workflows/stale-pr-cleanup.lock.yml # .github/workflows/sub-issue-closer.lock.yml # .github/workflows/terminal-stylist.lock.yml # .github/workflows/test-dispatcher.lock.yml # .github/workflows/test-project-url-default.lock.yml # .github/workflows/test-quality-sentinel.lock.yml # .github/workflows/test-workflow.lock.yml # .github/workflows/tidy.lock.yml # .github/workflows/typist.lock.yml # .github/workflows/ubuntu-image-analyzer.lock.yml # .github/workflows/uk-ai-operational-resilience.lock.yml # .github/workflows/update-astro.lock.yml # .github/workflows/video-analyzer.lock.yml # .github/workflows/visual-regression-checker.lock.yml # .github/workflows/weekly-blog-post-writer.lock.yml # .github/workflows/weekly-editors-health-check.lock.yml # .github/workflows/weekly-safe-outputs-spec-review.lock.yml # .github/workflows/workflow-generator.lock.yml # .github/workflows/workflow-health-manager.lock.yml # .github/workflows/workflow-normalizer.lock.yml # .github/workflows/workflow-skill-extractor.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
Author
Contributor
|
Please summarize the remaining blockers and propose the smallest next step.
|
Contributor
|
@copilot review all comments and address unresolved review feedback.
|
This was referenced Jun 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The daily AIC guardrail downloads the
usageartifact for every candidate run to sum AI Credits, which is wasteful when the same runs are rechecked across activations. This PR caches{run_id, aic}entries per workflow so the guardrail can skip artifact downloads for runs it has already accounted for.Cache write (conclusion job)
write_daily_aic_usage_cache.cjs: reads/tmp/gh-aw/usage/(already prepared bybuildUsageArtifactUploadSteps), computes AIC viasumAICFromUsageJSONLFiles, appends{run_id, aic}to/tmp/gh-aw/agentic-workflow-usage-cache.jsonlbuildDailyAICUsageCacheSteps()innotify_comment.goemits twoalways() + continue-on-errorsteps after usage artifact upload: a github-script write step +actions/cache/savehasMaxDailyAICGuardrail(data) && data.WorkflowID != ""Cache restore (activation job)
buildActivationDailyAICGuardrailStepprependsactions/cache/restorebefore the guardrail step whenWorkflowID != ""agentic-workflow-usage-{sanitized_id}-) to pick up the latest prior snapshotCache-aware guardrail
loadAICUsageCache()parses the restored JSONL intoMap<runId, aic>getRunAICas beforeCache key
e.g.
daily-max-ai-credits-test→agentic-workflow-usage-dailymaxaicreditstest-<run_id>pr-sous-chef: requested branch update from https://github.com/github/gh-aw/actions/runs/27443099587
Changeset
✨ PR Review Safe Output Test - Run 27443655159
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.
✨ PR Review Safe Output Test - Run 27444150086
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.