[AW Top 10] 02 Fix brittle safe-outputs conformance checks #70817

Priority 2/10 | 5 source issues | Impact 3/5 | Confidence 4/5 | Effort 2/5

One assignment, one coherent fix

Several conformance checks fail because they match literal source substrings that harmless refactors changed, or flag telemetry-only fields and missing description markers.

Implementation scope

Update the checks to use structural matching for the enforceCommentLimits signature and retry guard ordering, scope the cross-repo rule away from telemetry renderers, add the constraints marker to the add_comment tool description, and address the low usability gaps.

Done when

• The checker passes on the current code for SEC-005, TYPE-016, PTI-005 and MCE-001.
• The add_comment tool description contains the required constraints disclosure.

Why now

Five reports from one conformance run share a cause of checker versus implementation drift, and one coordinated change clears the recurring failures; severity labels may overstate the actual risk.

Unchanged AW sources close only after this summary is completed. Newer source activity and not-planned retirement do not trigger source closure. Assigned summaries are frozen; unassign to allow reclustering.

Generated by AW Essential Issue Clustering · copilot · auto · 28.1 AIC · ⌖ 0.614 AIC · ⊞ 8.9K · ◷