Enable Copilot SDK path in Daily Sub-Agent Model Resolution Audit to avoid provider-auth 403 failures by Copilot · Pull Request #47004 · github/gh-aw

Copilot · 2026-07-21T06:51:57Z

The daily model-resolution audit intermittently failed with Authentication failed with provider ... (HTTP 403) after partial progress, causing the scheduled run to terminate before report emission. This change moves the workflow onto the Copilot SDK execution path already used by other sub-agent-heavy workflows.

Root cause alignment
- The failing workflow (daily-model-resolution) was still on legacy Copilot CLI mode while similar workflows with sub-agent orchestration run with copilot-sdk: true.
- Failure signature matched provider-auth handling in the harness retry path (authentication_failed against API proxy).
Workflow change
- Updated workflow frontmatter to enable SDK mode:
  - .github/workflows/daily-model-resolution.md
- Recompiled generated workflow:
  - .github/workflows/daily-model-resolution.lock.yml
Runtime effect in generated lock workflow
- Adds Copilot SDK installation step.
- Switches agent execution to SDK driver invocation and exports SDK-specific env (COPILOT_SDK_URI, driver args), aligning auth/session behavior with known-good workflows.

engine:
  id: copilot
  copilot-sdk: true

Fixes [aw] Daily Sub-Agent Model Resolution Audit failed #46999

github-actions · 2026-07-21T07:12:51Z

PR Triage

Field	Value
Category	bug
Risk	low
Score	40/100
Breakdown	impact:15 · urgency:15 · quality:10
Action	`defer`

WIP draft — no committed files yet. Fixing daily sub-agent model resolution audit auth failure. Defer until draft is ready.

Run §29809051050

Generated by 🔧 PR Triage Agent · 59.3 AIC · ⌖ 5.53 AIC · ⊞ 5.6K · ◷

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-07-21T07:23:59Z

✅ Test Quality Sentinel completed test quality analysis.

No test files were added or modified in this PR. This PR only updates workflow configuration files (.github/workflows/daily-model-resolution.md and .github/workflows/daily-model-resolution.lock.yml) to enable Copilot SDK path. Test Quality Sentinel skipped.

github-actions · 2026-07-21T07:24:02Z

✅ Design Decision Gate 🏗️ completed the design decision gate check.

No ADR enforcement needed: PR #47004 does not have the 'implementation' label and has 0 new lines of code in business logic directories (threshold: 100).

github-actions · 2026-07-21T07:24:14Z

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

github-actions · 2026-07-21T07:25:07Z

✅ PR Code Quality Reviewer completed the code quality review.

Copilot

Pull request overview

Enables Copilot SDK execution for the daily model-resolution audit to reduce intermittent provider-auth failures during sub-agent orchestration.

Changes:

Enables copilot-sdk for the audit workflow.
Regenerates the lock workflow with SDK installation, driver invocation, and environment configuration.

Show a summary per file

File	Description
`.github/workflows/daily-model-resolution.md`	Enables Copilot SDK mode.
`.github/workflows/daily-model-resolution.lock.yml`	Applies the generated SDK runtime changes.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 2/2 changed files
Comments generated: 0
Review effort level: Medium

github-actions

The change is minimal and correct: adds copilot-sdk: true to the workflow frontmatter and the recompiled lock file consistently reflects the expected SDK execution path — install step, COPILOT_SDK_URI, GH_AW_COPILOT_SDK_DRIVER, driver invocation, and updated metadata hash. This matches the pattern used by other sub-agent-heavy workflows in the repo. No issues found.

🧵 Reviewed using Impeccable skills by Impeccable Skills Reviewer · 12.9 AIC · ⌖ 4.34 AIC · ⊞ 5K

github-actions

Skills-Based Review 🧠

Applied /diagnosing-bugs — one minor finding; changes are otherwise sound.

📋 Key Themes & Highlights

One Finding

GH_AW_MAX_TOOL_DENIALS: 5 is added without explanation in the PR description. If this is deliberate tuning (e.g. to cap retry storms that triggered the 403), recording the rationale will help future maintainers.

Positive Highlights

✅ Root-cause diagnosis is clear and well-described in the PR body.
✅ Single-line source change (copilot-sdk: true) is minimal and consistent with other SDK-mode workflows.
✅ Lock file regenerated correctly; metadata hashes and engine version entries updated as expected.
✅ No manual edits to auto-generated sections.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · 34.2 AIC · ⌖ 4.49 AIC · ⊞ 6.7K
_{Comment /matt to run again}

github-actions · 2026-07-21T07:28:44Z

          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
          COPILOT_MODEL: gpt-5.4-mini
+          COPILOT_SDK_URI: http://127.0.0.1:3002
+          GH_AW_COPILOT_SDK_DRIVER: 1


[/diagnosing-bugs] GH_AW_MAX_TOOL_DENIALS: 5 is added silently — it does not appear in the PR description and is not present in similar SDK-mode workflows. If this value is load-bearing (e.g. it guards against the retry storm that caused the 403), it should be called out explicitly so future readers understand why it's here.

💡 Suggestion

Add a comment in the workflow markdown or PR body explaining whether this is SDK-mode boilerplate or a deliberate tuning choice for this workflow's sub-agent count. Without that context, the next person to touch this file won't know if it's safe to change.

@copilot please address this.

github-actions

🔎 Code quality review by PR Code Quality Reviewer · 28.2 AIC · ⌖ 4.43 AIC · ⊞ 5.6K
_{Comment /review to run again}

github-actions · 2026-07-21T07:29:44Z

          GH_HOST: github.com
      - name: Install AWF binary
        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.37 --rootless
+      - name: Install GitHub Copilot SDK (Node.js)


npm install without --no-package-lock will create a package-lock.json in GITHUB_WORKSPACE, dirtying the checkout and potentially breaking downstream steps that check git status or rely on a clean working tree.

💡 Suggested fix

Add --no-package-lock to the install command:

- name: Install GitHub Copilot SDK (Node.js) run: cd "${GITHUB_WORKSPACE}" && npm install --ignore-scripts --no-save --no-package-lock `@github/copilot-sdk`@1.0.7

--no-save prevents package.json changes but does not suppress package-lock.json creation. Without --no-package-lock, npm will write a lock file into GITHUB_WORKSPACE on every run.

Since this is a generated file, the fix should be applied in the compiler template that emits the npm install step so all SDK-mode workflows benefit.

github-actions · 2026-07-21T08:27:30Z

🎉 This pull request is included in a new release.

Release: v0.82.15

Initial plan

5cef28e

Copilot AI assigned Copilot and pelikhan Jul 21, 2026

Copilot started work on behalf of pelikhan July 21, 2026 06:52 View session

Copilot AI linked an issue Jul 21, 2026 that may be closed by this pull request

[aw] Daily Sub-Agent Model Resolution Audit failed #46999

Closed

github-actions Bot added pr-action:defer pr-agent:copilot pr-priority:low pr-risk:low pr-type:bug labels Jul 21, 2026

github-actions Bot mentioned this pull request Jul 21, 2026

[PR Triage Report] PR Triage Report — 2026-07-21 (Run §29809051050) #47010

Closed

Enable Copilot SDK mode for daily model resolution workflow

0297230

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Fix daily sub-agent model resolution audit failure~~ Enable Copilot SDK path in Daily Sub-Agent Model Resolution Audit to avoid provider-auth 403 failures Jul 21, 2026

Copilot finished work on behalf of pelikhan July 21, 2026 07:14

Copilot AI requested a review from pelikhan July 21, 2026 07:14

pelikhan marked this pull request as ready for review July 21, 2026 07:22

Copilot AI review requested due to automatic review settings July 21, 2026 07:23

Copilot started reviewing on behalf of pelikhan July 21, 2026 07:23 View session

Copilot AI reviewed Jul 21, 2026

View reviewed changes

github-actions Bot approved these changes Jul 21, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jul 21, 2026

[aw] No-Op Runs #43499

Open

github-actions Bot reviewed Jul 21, 2026

View reviewed changes

pelikhan merged commit 5a138ca into main Jul 21, 2026
59 of 70 checks passed

pelikhan deleted the copilot/aw-daily-model-resolution-audit-fix branch July 21, 2026 07:29

github-actions Bot reviewed Jul 21, 2026

View reviewed changes

This was referenced Jul 21, 2026

Smoke Test: Pi - 29811153301 #47024

Closed

Smoke Test: MAI-Code-1-Flash - 29812424728 #47025

Closed

chore: CLI version updates 2026-07-21 #47005

Merged

Smoke Test: Claude - 29811153288 #47037

Closed

Uh oh!

Conversation

Copilot AI commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 21, 2026

PR Triage

Uh oh!

github-actions Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Skills-Based Review 🧠

One Finding

Positive Highlights

Uh oh!

github-actions Bot Jul 21, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jul 21, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jul 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Jul 21, 2026 •

edited

Loading

github-actions Bot commented Jul 21, 2026 •

edited

Loading

github-actions Bot commented Jul 21, 2026 •

edited

Loading

github-actions Bot commented Jul 21, 2026 •

edited

Loading

github-actions Bot commented Jul 21, 2026 •

edited

Loading