[uk ai resilience] [uk-ai-resilience] Recent-changes governance report 2026-10-20

[github-actions[bot]]

Executive summary

7-day window: 325 commits (207 with security signals), 31 open security issues, 1 open code-scanning alert, 0 secret-scanning alerts. Sub-agents could not be dispatched in this run (tool permissions), so this is a direct, partial-confidence assessment.

Asset graph (recent-change scoped)

• pkg/workflow (compiler, gradershell loader), safe-outputs JS (unified_session_*.cjs), setup/OTLP actions, firewall domain allowlists, container images (CVE burn-down issues).

Tier classification

Area	Tier	Rationale
pkg/workflow/gradershell/load.go	A	Alert 1034 (go/bad-redirect-check) is a path validator rejecting leading /, not a redirect; likely false positive. Recommend dismissal with comment.
Safe outputs conformance (SEC-005 false positives)	B	Needs exemption annotations; open high-priority issue 70449.
Setup OTLP token env injection	B	Open issue; env-var injection in Actions step.
Domain allowlist overlaps (domains-audit)	B	Wildcard/parent overlaps weaken exact-string guards.
Container images (firewall, MCP gateway, Node, Serena, etc.)	B	CVE burn-down issues open; patchability depends on upstream.
Generated npm/pip/uv installs	B	Non-deterministic installs; supply-chain risk.

Control verification gaps

• Ownership: bot-created issues lack named owners.
• Dependency: non-pinned generated installs; multiple CVE burn-downs.
• Secrets: 0 open alerts (good).
• Recovery: release artifacts lack per-binary attestations.

Risk scoring

Qualitative: exposure amplification medium (AI-assisted discovery of public code), patchability high (fast repo cadence), detectability high (CodeQL, audits), fragility medium, ownership confidence medium-low.

Remediation queue

Item	SLA
Triage/dismiss alert 1034	low
Fix OTLP token env injection	high
Deterministic generated installs	medium
Domain allowlist overlaps	medium
Container CVE burn-downs	medium

Exception register

None.

Metrics baseline

MTTR proxy: not computed; ownership coverage: low (bot-authored); unsupported dependency ratio: not measured; exception aging: n/a; exposure without recovery capability: none identified. Existing open issues already cover the Tier B items, so no new issues were created to avoid duplicates.

Generated by UK AI Operational Resilience · copilot · auto · 14 AIC · ⌖ 0.676 AIC · ⊞ 7.9K · ◷

• expires on Oct 23, 2026, 7:36 AM UTC-08:00