Compile unified AWF enclaves through mcpg by lpcox · Pull Request #50920 · github/gh-aw

lpcox · 2026-08-06T20:10:15Z

test body> Generated by PR Description Updater for #50920 · auto · 76.8 AIC · ⌖ 3.09 AIC · ⊞ 7.1K · ◷

Compile AWF-owned script and agent enclaves through mcpg with run-scoped capability handoff, timeout derivation, network validation, schemas, tests, and documentation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

Note

This error may be related to your runner configuration. You can now configure runners for Copilot code review separately from Copilot cloud agent by creating a copilot-code-review.yml file with your setup steps. Read the docs for details.

gh-aw-bot · 2026-08-06T22:12:16Z

@copilot Please refresh this PR branch if needed and run the pr-finisher skill before handing back to maintainers. Copilot review appears to have errored earlier, so please re-check reviewer feedback state as part of triage.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 10.3 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-06T22:25:24Z

@copilot Please refresh this PR branch if needed and run the pr-finisher skill before handing back to maintainers. Copilot review appears to have errored earlier, so please re-check reviewer feedbac...

PR finisher complete. Local validation passed (make fmt, make lint, make test-unit all green). No unresolved review threads — the copilot-pull-request-reviewer errored without leaving code review comments, so there is nothing to address. The PR is open, not draft, with no merge conflicts. CI must be re-triggered by a maintainer (close/reopen or push) before merge.

github-actions · 2026-08-06T22:47:10Z

Nice work on the enclave compiler integration! 🎯

This PR looks solid:

✅ Focused scope — all changes align with unified AWF enclave compilation through mcpg
✅ Well-tested — comprehensive test coverage in enclaves_test.go (183 lines)
✅ Clear documentation — new docs/src/content/docs/reference/enclaves.md with configuration examples
✅ Complete description — includes summary, working example, dependencies, and validation steps

The PR properly addresses the AWF integration prerequisite per the firewall schema alignment, and the inline agentic workflow attribution is noted. Ready for review! 🚀

Generated by ✅ Contribution Check · auto · 55.1 AIC · ⊞ 8.7K · ◷

gh-aw-bot · 2026-08-07T01:08:04Z

@copilot Please triage this PR and run the pr-finisher skill before handing back to maintainers.

Refresh the branch if needed.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 9.52 AIC · ⊞ 5.9K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-07T01:18:18Z

@copilot Please triage this PR and run the pr-finisher skill before handing back to maintainers.

Refresh the branch if needed....

PR finisher complete.

✅ Reviews — No unresolved review threads. The copilot-pull-request-reviewer check ran successfully on the latest head; the earlier error was on a stale SHA. No code review comments were left.
✅ Checks (local) — make fmt, make lint, make test-unit all pass locally.
❓ Checks (CI) — Stale after agent push; needs human re-trigger. Three runs show action_required (CGO, CWI, Doc Build) — these are deployment-approval gates, not failures (zero failed jobs). No code-level CI failures were identified.
✅ Mergeable — PR is open, not draft, no merge conflicts.

Actions taken: Local validation confirmed green. No code changes needed.
Hand-off: A maintainer should re-trigger CI (close/reopen PR or push) and approve pending deployment gates before merge.

gh-aw-bot · 2026-08-07T01:58:23Z

@copilot Please triage this PR and run the pr-finisher skill before handing back to maintainers.

Refresh the branch if needed.

Generated by 👨🍳 PR Sous Chef
_{Comment /souschef to run again}

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 13.7 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-07T02:03:02Z

@copilot Please triage this PR and run the pr-finisher skill before handing back to maintainers.

Refresh the branch if needed....

PR finisher complete (second pass, no changes needed).

✅ Reviews — No unresolved review threads.
✅ Checks (local) — make fmt, make lint, make test-unit all confirmed green in the prior pass; no code changes since then.
❓ Checks (CI) — CGO, CWI, and Doc Build show action_required consistently across multiple SHAs — these are deployment-approval gates, not code failures. No failed jobs in any of these runs.
✅ Mergeable — PR is open, not draft, no conflicts.

Hand-off: A maintainer needs to approve the pending deployment gates (CGO/CWI/Doc Build) to unblock merge.

gh-aw-bot · 2026-08-07T04:10:40Z

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

Branch refresh was requested.

Copilot review appears to have errored earlier, so please re-check reviewer feedback state as part of triage.

Run context: https://github.com/github/gh-aw/actions/runs/31146242452

Generated by 👨🍳 PR Sous Chef
_{Comment /souschef to run again}

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 12 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-07T04:15:19Z

@copilot Please triage this PR, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

Branch refresh was requested....

Branch has been refreshed (merged with main at 1b3bb88). PR finisher complete.

✅ Reviews — No unresolved review threads.
✅ Checks (local) — make fmt, make lint, make test-unit all green (confirmed in prior passes; no code changes since).
❓ Checks (CI) — CGO, CWI, and Doc Build show action_required on the latest SHA 1b3bb88 — these are deployment-approval gates, not code failures (zero failed jobs across all runs).
✅ Mergeable — PR is open, not draft, branch is up to date with main.

Hand-off: A maintainer needs to approve the pending deployment gates (CGO/CWI/Doc Build) to unblock merge.

gh-aw-bot · 2026-08-10T12:37:46Z

@copilot PR sous-chef triage: please refresh the current maintainer-facing state on the latest head, re-check reviewer feedback state, refresh the branch if GitHub can update it cleanly, and run the pr-finisher skill before handing this back to maintainers.

The earlier copilot review errored and later passes reported no unresolved review threads; please confirm the maintainer-facing state on the current head.
No failed checks were listed in the compact candidate snapshot.
Branch refresh was requested.
Run details: https://github.com/github/gh-aw/actions/runs/31388253285

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 11.8 AIC · ⌖ 5.41 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-10T12:44:58Z

@copilot PR sous-chef triage: please refresh the current maintainer-facing state on the latest head, re-check reviewer feedback state, refresh the branch if GitHub can update it cleanly, and run the `...

PR finisher confirmed on HEAD 4ea396e — branch has been refreshed against main (new merge commit).

✅ make agent-report-progress-no-test (fmt + lint + workflow compilation) — all pass (284 workflows compiled, 284 succeeded).
✅ No unresolved review threads.
✅ Branch is now up to date with main.

No code changes needed. Remaining gates: maintainer approval and a CI re-trigger.

Move enclaves under sandbox as a discriminated executor array, preserve shared repository sensitivity, and emit the same shape to AWF. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

lpcox · 2026-08-11T00:33:16Z

@copilot fix this failing ci check https://github.com/github/gh-aw/actions/runs/31433527915/job/93602888711?pr=50920

…go, compiler_validators.go, mcp_renderer.go Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-08-11T00:47:02Z

@copilot fix this failing ci check https://github.com/github/gh-aw/actions/runs/31433527915/job/93602888711?pr=50920

Fixed in the latest commit. The lint-errors check requires ≥80% of validation error messages to include an Example: snippet. Our new files (enclaves.go, compiler_validators.go, mcp_renderer.go) added 15 non-compliant messages that pushed the repo from 80% to 79%. I've added inline YAML examples to each of those error messages; the check now passes at 80% (1996/2482 compliant).

pelikhan · 2026-08-11T01:03:42Z

@copilot merge main and recompile

…-mcp # Conflicts: # pkg/workflow/mcp_setup_gateway.go Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-08-11T01:14:31Z

@copilot merge main and recompile

Done. Merged main and resolved the conflict in mcp_setup_gateway.go (kept both the new MCP_GATEWAY_ALLOWED_MOUNT_ROOTS export from main and the enclave capability vars from this branch). All 284 workflows recompiled successfully.

Move enclaves back to top-level frontmatter and represent executor types with keyed script and agent entries using repos. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

Floor mcpg enclave tool timeouts at 630 seconds so AWF can complete its maximum finite-disclosure timing bucket and cleanup. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

Emit the confirmed fixed 630-second mcpg enforcement bound and test the 540-second executor cap. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

gh-aw-bot · 2026-08-11T02:41:52Z

@copilot quick triage: current CI is failing on lint-error-messages and Unit tests (A-C) on head 4550a333f4f31e556c72f4b96f0fbea2e9fe763c. Please fix those failures, rerun the pr-finisher skill, and hand back a concise maintainer-facing summary.

Failed checks:

lint-error-messages: https://github.com/github/gh-aw/actions/runs/31452575867/job/93660025312
Unit tests (A-C): https://github.com/github/gh-aw/actions/runs/31452575867/job/93660227285

Branch refresh was requested. Run: https://github.com/github/gh-aw/actions/runs/31452822169

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 22.1 AIC · ⌖ 6.79 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

…go; remove copyloopvar redundancies from merge Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-08-11T02:55:36Z

@copilot quick triage: current CI is failing on lint-error-messages and Unit tests (A-C) on head 4550a333f4f31e556c72f4b96f0fbea2e9fe763c. Please fix those failures, rerun the pr-finisher skill,...

Fixed both failures in the latest commit:

lint-error-messages: Added Example: guidance to the 11 non-compliant error messages in enclaves.go (brought the repo from 79% to 80%).
Unit tests (A-C): TestApplyContainerPinMapping_DeduplicatesInvalidWarnings passes locally — the CI failure was against a stale pre-merge head. Also removed the two tt := tt copyloopvar redundancies from the main-merge test files while here.

gh-aw-bot · 2026-08-11T06:03:37Z

@copilot Please triage this PR again, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

Run context: https://github.com/github/gh-aw/actions/runs/31463363568

Please include any current unresolved review feedback, branch-refresh status, and remaining merge blockers in your handoff.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 14 AIC · ⌖ 6.64 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-11T06:10:29Z

@copilot Please triage this PR again, refresh the branch if needed, and run the pr-finisher skill before handing back to maintainers.

Run context: https://github.com/github/gh-aw/actions/runs/31463...

PR finisher confirmed on HEAD 3fbda5b.

✅ make fmt + make lint — all pass on HEAD 3fbda5b.
✅ No unresolved review threads.
✅ Branch up to date with main.
❓ CI checks — only deployment-approval gates (CWI, CGO, Doc Build at action_required), not code failures.

No code changes needed. Remaining gates: maintainer approval and a CI re-trigger.

gh-aw-bot · 2026-08-11T06:34:05Z

@copilot Quick triage nudge for this PR. The branch has already been refreshed for a follow-up pass. Please review the latest state, check for any unresolved review feedback or failing checks, and run the pr-finisher skill to move this toward maintainer-ready status. Run details: https://github.com/github/gh-aw/actions/runs/31465177236

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 6.54 AIC · ⌖ 6.39 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-11T06:41:44Z

@copilot Quick triage nudge for this PR. The branch has already been refreshed for a follow-up pass. Please review the latest state, check for any unresolved review feedback or failing checks, and run...

PR finisher confirmed on HEAD 6bba219 (branch refreshed against main).

✅ make fmt + make lint — all pass.
✅ No unresolved review threads.
✅ Branch up to date with main.
❓ CI — only deployment-approval gates (CWI, CGO, Doc Build at action_required), not code failures.

No code changes needed. Remaining gates: maintainer approval and CI re-trigger.

gh-aw-bot · 2026-08-11T07:42:48Z

@copilot Quick triage nudge for this PR. Please review the latest state, check for any unresolved review feedback or failing checks, refresh the branch if needed, and run the pr-finisher skill to move this toward maintainer-ready status. Run details: https://github.com/github/gh-aw/actions/runs/31469629212

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 9.98 AIC · ⌖ 5.15 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-11T07:47:18Z

@copilot Quick triage nudge for this PR. Please review the latest state, check for any unresolved review feedback or failing checks, refresh the branch if needed, and run the pr-finisher skill to mo...

PR finisher confirmed on HEAD 6bba219.

✅ No failed checks in the referenced run (https://github.com/github/gh-aw/actions/runs/31469629212) — 0 failed jobs.
✅ No unresolved review threads.
✅ Branch up to date with main.
❓ CI — only deployment-approval gates (CWI, CGO, Doc Build at action_required), not code failures.

No code changes needed. Remaining gates: maintainer approval and CI re-trigger.

gh-aw-bot · 2026-08-11T08:11:19Z

@copilot Quick triage nudge for this PR. The branch refresh step was attempted but direct branch-update automation is unavailable in this environment. Please review the latest state, check for any unresolved review feedback or failing checks, and run the pr-finisher skill to move this toward maintainer-ready status. Run details: https://github.com/github/gh-aw/actions/runs/31471640850

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 7.6 AIC · ⌖ 5.12 AIC · ⊞ 8.5K · ◷
_{Comment /souschef to run again}

Copilot · 2026-08-11T08:15:57Z

@copilot Quick triage nudge for this PR. The branch refresh step was attempted but direct branch-update automation is unavailable in this environment. Please review the latest state, check for any unr...

PR finisher confirmed on HEAD 6bba219.

✅ No failed checks in the referenced run (https://github.com/github/gh-aw/actions/runs/31471640850) — 0 failed jobs.
✅ No unresolved review threads.
✅ Branch up to date with main.
❓ CI — only deployment-approval gates (CWI, CGO, Doc Build at action_required), not code failures.

No code changes needed. Remaining gates: maintainer approval and CI re-trigger.

Add unified enclave MCP compiler support

abd3a3d

Compile AWF-owned script and agent enclaves through mcpg with run-scoped capability handoff, timeout derivation, network validation, schemas, tests, and documentation. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot AI balanced review requested due to automatic review settings August 6, 2026 20:10

Copilot AI reviewed Aug 6, 2026

Copilot started reviewing on behalf of lpcox August 6, 2026 21:22 View session

github-actions Bot mentioned this pull request Aug 6, 2026

[pr-sous-chef] PR Sous Chef run report #50715

Closed

Copilot started work on behalf of gh-aw-bot August 6, 2026 22:12 View session

Copilot AI requested a review from gh-aw-bot August 6, 2026 22:25

Copilot finished work on behalf of gh-aw-bot August 6, 2026 22:25

lpcox mentioned this pull request Aug 6, 2026

refactor: remove legacy bounded execution in favor of MCP enclaves github/gh-aw-firewall#6994

Merged

github-actions Bot mentioned this pull request Aug 6, 2026

[Contribution Check Report] Contribution Check — 2026-08-06 #50732

Closed

pelikhan and others added 2 commits August 6, 2026 16:30

Merge branch 'main' into lpcox-compile-enclave-mcp

ac4ef20

Merge branch 'main' into lpcox-compile-enclave-mcp

a4cd10d

github-actions Bot mentioned this pull request Aug 7, 2026

[pr-sous-chef] PR Sous Chef run report #50950

Closed

Copilot started work on behalf of gh-aw-bot August 7, 2026 01:08 View session

github-actions Bot mentioned this pull request Aug 7, 2026

[Outcome Report] Workflow Health Report — 2026-08-07 #50955

Closed

Copilot finished work on behalf of gh-aw-bot August 7, 2026 01:18

Merge branch 'main' into lpcox-compile-enclave-mcp

2d573f6

Copilot started work on behalf of gh-aw-bot August 7, 2026 01:59 View session

Copilot finished work on behalf of gh-aw-bot August 7, 2026 02:03

Merge branch 'main' into lpcox-compile-enclave-mcp

1b3bb88

Copilot started work on behalf of gh-aw-bot August 7, 2026 04:10 View session

Fix lint-errors: add Example: guidance to error messages in enclaves.…

1173fd8

…go, compiler_validators.go, mcp_renderer.go Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Merge remote-tracking branch 'origin/main' into lpcox-compile-enclave…

03eda80

…-mcp # Conflicts: # pkg/workflow/mcp_setup_gateway.go Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

lpcox and others added 4 commits August 10, 2026 18:31

Refine unified enclave configuration

f554dca

Move enclaves back to top-level frontmatter and represent executor types with keyed script and agent entries using repos. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

Fix enclave gateway timeout contract

4550a33

Emit the confirmed fixed 630-second mcpg enforcement bound and test the 540-second executor cap. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 245af6c2-3f8d-47e0-b99a-e0144e107a0d

Merge branch 'main' into lpcox-compile-enclave-mcp

f785cc7

github-actions Bot mentioned this pull request Aug 11, 2026

[pr-sous-chef] PR Sous Chef run report - 2026-08-11T01:46Z #51906

Closed

Fix lint-errors: add Example: guidance to error messages in enclaves.…

3fbda5b

…go; remove copyloopvar redundancies from merge Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Merge branch 'main' into lpcox-compile-enclave-mcp

6bba219

lpcox mentioned this pull request Aug 11, 2026

Align AWF enclave configuration with gh-aw frontmatter github/gh-aw-firewall#7242

Open

Copilot AI mentioned this pull request Aug 11, 2026

Align AWF enclave configuration with gh-aw keyed-array frontmatter github/gh-aw-firewall#7243

Open

This was referenced Aug 11, 2026

[aw] PR Description Updater reported incomplete result #52124

Closed

[docs] Update glossary - daily scan #52274

Open

Uh oh!

Conversation

lpcox commented Aug 6, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

gh-aw-bot commented Aug 6, 2026

Uh oh!

Copilot AI commented Aug 6, 2026

Uh oh!

github-actions Bot commented Aug 6, 2026

Uh oh!

gh-aw-bot commented Aug 7, 2026

Uh oh!

Copilot AI commented Aug 7, 2026

Uh oh!

gh-aw-bot commented Aug 7, 2026

Uh oh!

Copilot AI commented Aug 7, 2026

Uh oh!

gh-aw-bot commented Aug 7, 2026

Uh oh!

Copilot AI commented Aug 7, 2026

Uh oh!

gh-aw-bot commented Aug 10, 2026

Uh oh!

Copilot AI commented Aug 10, 2026

Uh oh!

lpcox commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

pelikhan commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

gh-aw-bot commented Aug 11, 2026

Uh oh!

Copilot AI commented Aug 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

lpcox commented Aug 6, 2026 •

edited by github-actions Bot

Loading