[github-actions]

Documentation Updates - 2026-10-31

Document safe-output CLI payload syntax and the retry history available in audit reports. Two reference pages changed, with 50 lines added.

Features Documented

• Safe-output inline JSON and per-field stdin syntax, including the distinction between raw Markdown and full-object JSON input (from [safeoutputs] Document CLI per-field stdin mode to stop JSON-escaping failures #73301).
• Audit retry counts, attempt history, native engine retry metadata, interrupted attempts, and evidence limits (from Preserve retry history in unified agent sessions #73262).

Detailed Changes and Review Coverage

Changes Made

• Added a concise CLI Payloads section to docs/src/content/docs/reference/safe-outputs.md.
• Added Retry history to docs/src/content/docs/reference/audit.md, with links to the session specification and execution policy.
• Preserved the top-level README and documentation landing page.

References

• [safeoutputs] Document CLI per-field stdin mode to stop JSON-escaping failures #73301
• Preserve retry history in unified agent sessions #73262

Scanned 37 merged PR titles returned by the date-based search starting October 30, read the first 20 PR summaries, and reviewed the corresponding recent commit listing. This date window also includes activity older than exactly 24 hours. Checked accessible open documentation issues, issues closed since October 24, and the cookie query. Harbor export/regrading, native-provider routing, token-broker configuration, incomplete-result reasons, and compliance patterns already have documentation. Workflow model-pin changes and internal fixes did not require additions here. Factory Droid remains an experimental sample.

Some issue results and the #73301 file listing were withheld by the integration integrity policy; they were not retrieved through an alternative path. The CLI addition was checked against available CLI help and source inspected before that response. Steering issue #73484 returned no comments.

Skipped Issues

• Add SOC-2 compliance patterns doc page #41746 — already covered by Human Review and Compliance Patterns and the enterprise cross-link.
• Provider-based authentication for Claude, Copilot, Codex. #16498 — current authentication reference documents unsupported OAuth and supported provider authentication; broader implementation requests are outside this documentation update.
• OWASP Agentic Top 10 compliance evaluation: gap analysis across gh-aw, firewall, and mcpg #28770 — broad security/compliance assessment requires separate validation; issue assertions were not adopted as documentation facts.
• 🔍 Multi-Device Docs Testing Report - 2026-10-27 #72330 — site-build/UI: needs Astro/site-build agent.
• [workflow-style] Normalize report formatting for non-compliant workflows #72980 — workflow prompt normalization, outside this content-reference update.
• [cli-consistency] CLI Consistency Issues - 2026-10-28 #72701 — all six command option lists already contain --pr-message; remaining findings require CLI decisions.
• [cli-consistency] CLI Consistency Issues - 2026-10-27 #72447 — the reference already identifies --read-only as hidden and directs readers to work-queue subcommand help.
• [cli-consistency] CLI Consistency Issues - 2026-10-26 #72119 and [cli-consistency] CLI Consistency Issues - 2026-10-23 #71449 — timeout units are documented; remaining CLI consistency proposals require implementation decisions.

Validation

• Passed git diff --check, inline JSON/shell-quoting checks, code-fence checks, and added link-target checks.
• TMPDIR=/tmp/gh-aw/agent make agent-report-progress stopped during build: downloading Go 1.27.3 failed certificate verification for proxy.golang.org. The test stage did not run. No certificate checks were weakened or bypassed.
• No workflow frontmatter or generated locks changed. Full documentation site build was not run.

AI Dictionary Alignment Summary

Terms reviewed: tool call, session, harness. Retained repository-specific safe-output and unified-session terminology, consistent with the supplied dictionary summary. No terminology conflicts or new generic AI definitions.

Notes and Next Actions

The legacy .github/instructions/documentation.instructions.md path is absent; followed .github/skills/documentation/SKILL.md. This PR is a draft because the required validation gate could not complete. Run that gate in an environment with a working Go toolchain before marking ready for review.

Generated by 📝 Daily Documentation Updater · codex · gpt60 · ~288 AIC · ⌖ ~74 AIC · ⊞ 19.5K · ◷

• expires on Nov 1, 2026, 2:44 AM UTC-08:00