Smoke Test: MAI-Code-1.1-Flash - 39518935420 #70681

Commit list:

• docs: cover empty-output failure codes in debug playbook (docs: cover empty-output failure codes in debug playbook #70676) (d9c3d14)
• Allow digest-pinned MCP images in local gateway schemas (Allow digest-pinned MCP images in local gateway schemas #69997) (0168417)
• Resolve Copilot sub-agent models in the harness (CLI and SDK) and fail closed (Resolve Copilot sub-agent models in the harness (CLI and SDK) and fail closed #70389) (70e15c7)
• Resolve experiment references in inline sub-agent frontmatter before writing the agent file; fail smoke-copilot when file-summarizer doesn't run (Resolve experiment references in inline sub-agent frontmatter before writing the agent file; fail smoke-copilot when file-summarizer doesn't run #70387) (bc02894)
• Bump gh-aw-firewall to v0.28.70 (Bump gh-aw-firewall to v0.28.70 #70595) (ea76973)
• Bump MCPG to v0.4.36 (Bump MCPG to v0.4.36 #70581) (d8c4598)
• Reject unsafe action pins and resolve critical alert triage (Reject unsafe action pins and resolve critical alert triage #70616) (44aab31)
• Prefer local Git lookups for work queue replay (Prefer local Git lookups for work queue replay #70617) (5db6123)
• fix: clear fixable Node image CVEs and correct burn-down tracking (fix: clear fixable Node image CVEs and correct burn-down tracking #70615) (e64a1ce)
• fix(cli): clean strict dry-run MCP compile diagnostics (fix(cli): clean strict dry-run MCP compile diagnostics #70614) (7aa5870)
• Narrow engine vendor allowlists and guard suffix/wildcard coverage (Narrow engine vendor allowlists and guard suffix/wildcard coverage #70619) (db99e6c)
• fix: ensure Serena Go language-server readiness (fix: ensure gopls and semantic readiness for Serena Go workflows #70618) (b378adc)
• fix(linters): close resource tracking and diagnostic gaps (fix(linters): close resource tracking and diagnostic gaps #70611) (cb4ed94)
• fix: classify engine driver crashes and secret-redaction failures (fix: classify engine driver crashes and secret-redaction failures #70605) (85941cf)
• Harden compiler bootstrap against compromised certificate authorities (Harden compiler bootstrap against compromised certificate authorities #70549) (10a5333)
• Pin generated SDK and repository-owned package installs (Pin generated SDK and repository-owned package installs #70620) (24f43c2)
• fix: reject multiline OTLP tokens and environment entries (fix: prevent OTLP token environment-file injection #70597) (4b01533)
• Expand Windows CLI pairwise coverage and bound ConPTY draining (Expand Windows CLI scenario coverage and bound ConPTY cleanup #70604) (bc0c8ba)
• fix: prioritize current failures in workflow health checks (fix: prioritize current failures in workflow health checks #70552) (f9cab05)
• fix: align CI assertions and guidance with admission gate (Fix CI assertions and troubleshooting guidance for admission gate #70585) (c756711)
• Improve reporting discovery for missing tools and data (Improve reporting discovery for missing tools and data #70576) (a751cce)
• Add isolated OIDC admission and runtime credit allowances (Add isolated OIDC admission and runtime credit allowances #70429) (be70cb4)
• build(deps): apply feed-available Dependabot updates (build(deps): apply available Dependabot updates with 1ES checks #70550) (1d5999c)
• Add needs consistency linting and fix activation output references (Add needs consistency linting and fix activation output references #70546) (862ff31)
• Add model-based Copilot SDK shell parser fuzz generator (Add model-based fuzzing for the Copilot SDK shell parser #70528) (ecdb146)
• Fix MCP health tool icon expectation ([avenger] Fix MCP health tool icon expectation #70545) (ef90947)
• Fix MCP tool icon expectations for health ([avenger] Fix MCP health tool icon test expectations #70535) (e5d675b)
• chore: remove dead function sumAICFromUsageJSONLFilesWithWarnings ([dead-code] chore: remove dead functions — 1 function removed #70531) (0c1b7b3)
• Add Agent of the Day blog post ([blog] Agent of the Day – 2026-10-20 #70532) (9a7ccb9)
• Add declarative webhook triggers and versioned CAO subscriptions (Add declarative webhook triggers and versioned CAO subscriptions #69772) (b35b1dd)

Summary:
The recent activity is dominated by hardening and reliability work across the CLI, security boundaries, and compiler/runtime integrity. Several commits focus on safer dependency pinning, stricter validation, and fixes for diagnostics and health checks, while other changes improve Copilot sub-agent behavior and local execution reliability.

Bash tool test: ✅
Overall status: PASS
Run URL: https://github.com/github/gh-aw/actions/runs/39518935420
Timestamp: 2026-10-21T00:06:18Z

Generated by ⚡ Smoke Copilot MAI · copilot · mai11 · 0.797 AIC · ⌖ 0.523 AIC · ⊞ 17.9K · ◷
_{Comment <em>/smoke-copilot-mai</em> to run again
Add label <em>smoke</em> to run again}

• expires on Oct 20, 2026, 6:09 PM UTC-08:00