Daily Firewall Report2026-09-05 #58698

2026-09-05T02:44:45Z

github-actions[bot]
Bot Sep 5, 2026

📊 Trend Charts

Chart generation was unavailable this cycle (the chart generator sub-agent did not return output); charts are omitted from this report.

🔥 Executive Summary

Report date: 2026-09-05

This report covers 236 workflow runs across 100 distinct workflows that used the firewall feature in the past 24 hours. A total of 13,841 network requests were monitored, of which 489 (3.53%) were blocked. The most frequently blocked domain was o205451.ingest.us.sentry.io:443 with 123 blocks, largely tied to Sentry telemetry (o205451.ingest.us.sentry.io) and ChatGPT analytics (ab.chatgpt.com) endpoints not present in workflow allowlists. Several development-service domains (github.com, raw.githubusercontent.com, api.github.com, registry.npmjs.org, pypi.org, proxy.golang.org) were also blocked in specific workflows, suggesting narrower allowlists than the actual runtime needs in those cases.

📊 Key Metrics

Total network requests monitored: 13,841
- ✅ Allowed: 13,352
- 🚫 Blocked: 489
Block rate: 3.53%
Total unique blocked domains: 19

Terminology Note: Allowed requests successfully reached their destination; blocked requests were prevented by the firewall. A domain appearing here means it was blocked at least once during this period.

🚫 Top Blocked Domains

Domain	Times Blocked	Workflows	Category
`o205451.ingest.us.sentry.io:443`	123	Agent Performance Analyzer - Meta-Orchestrator, Agent Persona Explorer, Architecture Guardian, ...	Analytics/Tracking
`ab.chatgpt.com:443`	79	AI Moderator, Daily Credit Limit Test, Daily Go Test Parallelizer, ...	Other
`github.com:443`	62	Contribution Check, Daily Malicious Code Scan Agent, Design Decision Gate 🏗️, ...	Development Services
`raw.githubusercontent.com:443`	48	PR Code Quality Reviewer	Development Services
`api.github.com:443`	44	Agent Job Health Monitor, Agent Performance Analyzer - Meta-Orchestrator, Daily Project Performance Summary Generator (Using MCP Scripts), ...	Development Services
`api.anthropic.com:443`	32	Agent Job Health Monitor, Daily Safe Output Tool Optimizer, Deep Report, ...	Other
`www.google.com:443`	24	Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`content-autofill.googleapis.com:443`	16	Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`proxy.golang.org:443`	13	Daily Formal Spec Verifier, Impeccable Skills Reviewer, Matt Pocock Skills Reviewer, ...	Development Services
`accounts.google.com:443`	12	Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`registry.npmjs.org:443`	10	PR Sous Chef, Smoke Cursor	Development Services
`pypi.org:443`	6	PR Code Quality Reviewer	Development Services
`android.clients.google.com:443`	5	Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`clients2.google.com`	4	Smoke Claude, Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`www.gstatic.com:443`	4	Smoke Copilot, Smoke Copilot - AOAI (Entra)	Other
`host.docker.internal:4173`	3	Smoke Copilot	Other
`repo42.cursor.sh:443`	2	Smoke Cursor	Other
`dc.services.visualstudio.com:443`	1	Smoke Copilot - AOAI (Entra)	Other
`mtalk.google.com:5228`	1	Smoke Claude	Other

View Detailed Request Patterns by Workflow

Workflow: PR Code Quality Reviewer (10 runs analyzed)

Domain	Blocked Count	Block Rate	Category
`raw.githubusercontent.com:443`	48	100%	Development Services
`api.github.com:443`	36	100%	Development Services
`pypi.org:443`	6	100%	Development Services
`github.com:443`	5	100%	Development Services

Total blocked requests: 95
Total unique blocked domains: 4
Most frequently blocked domain: raw.githubusercontent.com:443

Workflow: Smoke Copilot (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`www.google.com:443`	15	0	100%	Other
`accounts.google.com:443`	7	0	100%	Other
`content-autofill.googleapis.com:443`	6	0	100%	Other
`host.docker.internal:4173`	3	0	100%	Other
`o205451.ingest.us.sentry.io:443`	3	20	13%	Analytics/Tracking
`android.clients.google.com:443`	2	0	100%	Other
`clients2.google.com`	2	0	100%	Other
`www.gstatic.com:443`	2	0	100%	Other

Total blocked requests: 40
Total unique blocked domains: 8
Most frequently blocked domain: www.google.com:443

Workflow: PR Sous Chef (47 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	30	0	100%	Development Services
`registry.npmjs.org:443`	8	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	1	369	0%	Analytics/Tracking

Total blocked requests: 39
Total unique blocked domains: 3
Most frequently blocked domain: github.com:443

Workflow: Smoke Copilot - AOAI (Entra) (1 runs analyzed)

Domain	Blocked Count	Block Rate	Category
`content-autofill.googleapis.com:443`	10	100%	Other
`www.google.com:443`	9	100%	Other
`accounts.google.com:443`	5	100%	Other
`android.clients.google.com:443`	3	100%	Other
`www.gstatic.com:443`	2	100%	Other
`clients2.google.com`	1	100%	Other
`dc.services.visualstudio.com:443`	1	100%	Other

Total blocked requests: 31
Total unique blocked domains: 7
Most frequently blocked domain: content-autofill.googleapis.com:443

Workflow: Daily Formal Spec Verifier (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	19	33	37%	Analytics/Tracking
`proxy.golang.org:443`	1	0	100%	Development Services

Total blocked requests: 20
Total unique blocked domains: 2
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Issue Monster (17 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	19	3	86%	Other

Total blocked requests: 19
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Ponytail Reviewer (10 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	14	0	100%	Other
`github.com:443`	4	4	50%	Development Services

Total blocked requests: 18
Total unique blocked domains: 2
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Contribution Check (4 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	8	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	7	78	8%	Analytics/Tracking

Total blocked requests: 15
Total unique blocked domains: 2
Most frequently blocked domain: github.com:443

Workflow: Code Scanning Fixer (3 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	11	57	16%	Analytics/Tracking

Total blocked requests: 11
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Issues Report Generator (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	10	29	26%	Analytics/Tracking

Total blocked requests: 10
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Test Quality Sentinel (10 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	6	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	3	60	5%	Analytics/Tracking

Total blocked requests: 9
Total unique blocked domains: 2
Most frequently blocked domain: github.com:443

Workflow: Impeccable Skills Reviewer (10 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	4	0	100%	Development Services
`proxy.golang.org:443`	4	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	1	164	1%	Analytics/Tracking

Total blocked requests: 9
Total unique blocked domains: 3
Most frequently blocked domain: github.com:443

Workflow: Daily Copilot PR Merged Report (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	9	18	33%	Analytics/Tracking

Total blocked requests: 9
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Go Test Parallelizer (6 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	8	1	89%	Other

Total blocked requests: 8
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Matt Pocock Skills Reviewer (11 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	4	154	3%	Analytics/Tracking
`proxy.golang.org:443`	3	0	100%	Development Services

Total blocked requests: 7
Total unique blocked domains: 2
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: [aw] Failure Investigator (6h) (2 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	7	42	14%	Other

Total blocked requests: 7
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Deep Report (2 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	6	195	3%	Other
`api.github.com:443`	1	0	100%	Development Services

Total blocked requests: 7
Total unique blocked domains: 2
Most frequently blocked domain: api.anthropic.com:443

Workflow: Workflow Normalizer (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	6	0	100%	Other

Total blocked requests: 6
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Copilot PR Prompt Pattern Analysis (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	6	13	32%	Analytics/Tracking

Total blocked requests: 6
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Observability Report for AWF Firewall and MCP Gateway (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	6	0	100%	Other

Total blocked requests: 6
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Smoke Temporary ID (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	6	0	100%	Other

Total blocked requests: 6
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Smoke Service Ports (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	4	0	100%	Other
`proxy.golang.org:443`	2	0	100%	Development Services

Total blocked requests: 6
Total unique blocked domains: 2
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Agent Performance Analyzer - Meta-Orchestrator (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.github.com:443`	3	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	2	32	6%	Analytics/Tracking

Total blocked requests: 5
Total unique blocked domains: 2
Most frequently blocked domain: api.github.com:443

Workflow: Smoke OTEL (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	5	0	100%	Other

Total blocked requests: 5
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Smoke Multi PR (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	5	25	17%	Analytics/Tracking

Total blocked requests: 5
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Smoke Cursor (1 runs analyzed)

Domain	Blocked Count	Block Rate	Category
`registry.npmjs.org:443`	2	100%	Development Services
`repo42.cursor.sh:443`	2	100%	Other
`proxy.golang.org:443`	1	100%	Development Services

Total blocked requests: 5
Total unique blocked domains: 3
Most frequently blocked domain: registry.npmjs.org:443

Workflow: Repository Quality Improvement Agent (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	4	23	15%	Analytics/Tracking

Total blocked requests: 4
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Issue Triage Agent (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	4	0	100%	Other

Total blocked requests: 4
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Breaking Change Checker (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	4	17	19%	Analytics/Tracking

Total blocked requests: 4
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Smoke Claude (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	76	3%	Other
`clients2.google.com`	1	0	100%	Other
`mtalk.google.com:5228`	1	0	100%	Other

Total blocked requests: 4
Total unique blocked domains: 3
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Checkout PR Dispatch (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	4	9	31%	Analytics/Tracking

Total blocked requests: 4
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Design Decision Gate 🏗️ (10 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	3	0	100%	Development Services

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: github.com:443

Workflow: Slide Deck Maintainer (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	3	32	9%	Analytics/Tracking

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: AI Moderator (3 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	3	0	100%	Other

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Daily Secrets Analysis Agent (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	3	10	23%	Analytics/Tracking

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: PR Triage Agent (2 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.github.com:443`	2	0	100%	Development Services
`o205451.ingest.us.sentry.io:443`	1	51	2%	Analytics/Tracking

Total blocked requests: 3
Total unique blocked domains: 2
Most frequently blocked domain: api.github.com:443

Workflow: Detection Analysis Report (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	3	110	3%	Other

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Project (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	3	5	38%	Analytics/Tracking

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Smoke Agent: all/merged (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	3	18	14%	Other

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Pi (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	3	40%	Analytics/Tracking
`proxy.golang.org:443`	1	0	100%	Development Services

Total blocked requests: 3
Total unique blocked domains: 2
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Smoke Copilot ARM64 (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	3	20	13%	Analytics/Tracking

Total blocked requests: 3
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: CLI Consistency Checker (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	25	7%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Malicious Code Scan Agent (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`github.com:443`	2	0	100%	Development Services

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: github.com:443

Workflow: Architecture Guardian (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	5	29%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Delight (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	16	11%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: UK AI Operational Resilience (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	18	10%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Agent Persona Explorer (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	7	22%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Safe Output Integrator (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	15	12%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Spec Coverage Review (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	2	9	18%	Analytics/Tracking

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Lockfile Statistics Analysis Agent (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	32	6%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Daily Safe Output Tool Optimizer (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	218	1%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Agent Job Health Monitor (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	1	494	0%	Other
`api.github.com:443`	1	0	100%	Development Services

Total blocked requests: 2
Total unique blocked domains: 2
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Call Workflow (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	2	0	100%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Smoke Agent: all/none (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	18	10%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Agent: public/approved (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	18	10%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Smoke Agent: public/none (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.anthropic.com:443`	2	18	10%	Other

Total blocked requests: 2
Total unique blocked domains: 1
Most frequently blocked domain: api.anthropic.com:443

Workflow: Daily Credit Limit Test (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	1	0	100%	Other

Total blocked requests: 1
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

Workflow: Daily SPDD Spec Planner (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`o205451.ingest.us.sentry.io:443`	1	11	8%	Analytics/Tracking

Total blocked requests: 1
Total unique blocked domains: 1
Most frequently blocked domain: o205451.ingest.us.sentry.io:443

Workflow: Daily Project Performance Summary Generator (Using MCP Scripts) (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`api.github.com:443`	1	0	100%	Development Services

Total blocked requests: 1
Total unique blocked domains: 1
Most frequently blocked domain: api.github.com:443

Workflow: Smoke Kiro (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`proxy.golang.org:443`	1	0	100%	Development Services

Total blocked requests: 1
Total unique blocked domains: 1
Most frequently blocked domain: proxy.golang.org:443

Workflow: Smoke Codex (1 runs analyzed)

Domain	Blocked Count	Allowed Count	Block Rate	Category
`ab.chatgpt.com:443`	1	0	100%	Other

Total blocked requests: 1
Total unique blocked domains: 1
Most frequently blocked domain: ab.chatgpt.com:443

View Complete Blocked Domains List

Domain	Total Blocks	Workflows
`ab.chatgpt.com:443`	79	AI Moderator, Daily Credit Limit Test, Daily Go Test Parallelizer, Daily Observability Report for AWF Firewall and MCP Gateway, Issue Monster, Issue Triage Agent, Ponytail Reviewer, Smoke Call Workflow, Smoke Codex, Smoke OTEL, Smoke Service Ports, Smoke Temporary ID, Workflow Normalizer
`accounts.google.com:443`	12	Smoke Copilot, Smoke Copilot - AOAI (Entra)
`android.clients.google.com:443`	5	Smoke Copilot, Smoke Copilot - AOAI (Entra)
`api.anthropic.com:443`	32	Agent Job Health Monitor, Daily Safe Output Tool Optimizer, Deep Report, Detection Analysis Report, Lockfile Statistics Analysis Agent, Smoke Agent: all/merged, Smoke Agent: all/none, Smoke Agent: public/approved, Smoke Agent: public/none, Smoke Claude, [aw] Failure Investigator (6h)
`api.github.com:443`	44	Agent Job Health Monitor, Agent Performance Analyzer - Meta-Orchestrator, Daily Project Performance Summary Generator (Using MCP Scripts), Deep Report, PR Code Quality Reviewer, PR Triage Agent
`clients2.google.com`	4	Smoke Claude, Smoke Copilot, Smoke Copilot - AOAI (Entra)
`content-autofill.googleapis.com:443`	16	Smoke Copilot, Smoke Copilot - AOAI (Entra)
`dc.services.visualstudio.com:443`	1	Smoke Copilot - AOAI (Entra)
`github.com:443`	62	Contribution Check, Daily Malicious Code Scan Agent, Design Decision Gate 🏗️, Impeccable Skills Reviewer, PR Code Quality Reviewer, PR Sous Chef, Ponytail Reviewer, Test Quality Sentinel
`host.docker.internal:4173`	3	Smoke Copilot
`mtalk.google.com:5228`	1	Smoke Claude
`o205451.ingest.us.sentry.io:443`	123	Agent Performance Analyzer - Meta-Orchestrator, Agent Persona Explorer, Architecture Guardian, Breaking Change Checker, CLI Consistency Checker, Code Scanning Fixer, Contribution Check, Copilot PR Prompt Pattern Analysis, Daily Copilot PR Merged Report, Daily Formal Spec Verifier, Daily Issues Report Generator, Daily SPDD Spec Planner, Daily Safe Output Integrator, Daily Secrets Analysis Agent, Daily Spec Coverage Review, Delight, Impeccable Skills Reviewer, Matt Pocock Skills Reviewer, PR Sous Chef, PR Triage Agent, Repository Quality Improvement Agent, Slide Deck Maintainer, Smoke Checkout PR Dispatch, Smoke Copilot, Smoke Copilot ARM64, Smoke Multi PR, Smoke Pi, Smoke Project, Test Quality Sentinel, UK AI Operational Resilience
`proxy.golang.org:443`	13	Daily Formal Spec Verifier, Impeccable Skills Reviewer, Matt Pocock Skills Reviewer, Smoke Cursor, Smoke Kiro, Smoke Pi, Smoke Service Ports
`pypi.org:443`	6	PR Code Quality Reviewer
`raw.githubusercontent.com:443`	48	PR Code Quality Reviewer
`registry.npmjs.org:443`	10	PR Sous Chef, Smoke Cursor
`repo42.cursor.sh:443`	2	Smoke Cursor
`www.google.com:443`	24	Smoke Copilot, Smoke Copilot - AOAI (Entra)
`www.gstatic.com:443`	4	Smoke Copilot, Smoke Copilot - AOAI (Entra)

🛡️ Security Recommendations

Likely legitimate services worth allowlisting where missing:

github.com:443, api.github.com:443, raw.githubusercontent.com:443 — core GitHub API/content access; blocked in PR Code Quality Reviewer, Contribution Check, Test Quality Sentinel, Impeccable Skills Reviewer, and several others. These workflows likely need explicit GitHub network permissions added.
registry.npmjs.org:443, pypi.org:443, proxy.golang.org:443 — standard package registries blocked in PR Sous Chef, PR Code Quality Reviewer, Smoke Cursor, Daily Formal Spec Verifier, Impeccable/Matt Pocock Skills Reviewer. If these workflows install dependencies, add the relevant registry domains.
o205451.ingest.us.sentry.io:443 — Sentry telemetry endpoint used by many workflows (123 total blocks, mostly partial — allowed traffic also flows through it). This is an engine/tooling telemetry sink; consider a single shared allowlist entry across firewall-enabled workflows rather than per-workflow exceptions.

Potential concerns / lower confidence:

ab.chatgpt.com:443 (79 blocks across AI Moderator, Daily Credit Limit Test, Daily Go Test Parallelizer, Issue Monster, Ponytail Reviewer, and others) — appears to be OpenAI/ChatGPT-related analytics/beacon traffic. Verify whether this is required functionality before allowlisting; if it's non-essential telemetry, the current block is appropriate.
www.google.com, accounts.google.com, content-autofill.googleapis.com, android.clients.google.com, clients2.google.com, www.gstatic.com, mtalk.google.com:5228 — all concentrated in Smoke Copilot, Smoke Copilot - AOAI (Entra), and Smoke Claude runs. These look like browser/autofill/Google account chatter from an embedded browser context (e.g., Playwright/Chromium), not required for agent operation — blocking appears correct.
host.docker.internal:4173 (Smoke Copilot) and repo42.cursor.sh:443 (Smoke Cursor) are tool-specific local/vendor endpoints; review case-by-case whether they need allowlisting for those smoke tests to pass.

Workflows to review network permissions for:

PR Code Quality Reviewer (95 blocked requests, 100% block rate on GitHub/PyPI domains — likely missing standard dev-service allowlist entries)
Smoke Copilot / Smoke Copilot - AOAI (Entra) (40/31 blocked, all Google-related — likely fine as-is, but confirm intent)
PR Sous Chef (39 blocked, github.com + npm registry at 100% block rate despite 47 runs — recurring pattern worth allowlisting)

No policy-rule-level attribution data (policy_analysis) was available in any of the analyzed run summaries, so rule hit-count and per-rule deny-reason analysis could not be produced this cycle.

Report generated from 236 cached run summaries; runs without run_summary.json or without firewall_analysis were skipped.

Generated by 🔒 Daily Firewall Logs Collector and Reporter · copilot · auto · 45.2 AIC · ⌖ 19.5 AIC · ⊞ 10.5K · ◷

expires on Sep 18, 2026, 6:44 PM UTC-08:00

Uh oh!