Designer Drift AuditDesigner Drift Report — 2026-07-02

[github-actions]

Summary

5 drift items found across 2 categories: 4 new safe output types missing from the SKILL.md mapping table, and 1 stale reference (update-branch listed as standalone safe output when it is only a parameter of update-pull-request).

Drift Items

View Drift Items by Category

Missing Safe Output Types

• Source: .github/aw/safe-outputs-automation.md

• Missing from: SKILL.md (Safe Output Mapping table)

• Details: The following safe output types appear in the reference doc but have no corresponding mapping row in the SKILL.md Safe Output Mapping table:

  • upload-artifact — Upload files as run-scoped GitHub Actions artifacts (distinct from upload-asset which uses an orphaned git branch)
  • dispatch_repository — Dispatch repository_dispatch events to external repos (experimental)
  • call-workflow — Call reusable workflows via workflow_call fan-out (orchestrator pattern)
  • create-check-run — Create GitHub Check Runs to surface analysis results in the PR Checks UI

• Suggested fix: Add mapping rows to the ### Safe Output Mapping table in .github/skills/agentic-workflow-designer/SKILL.md, for example:

  | "upload a run artifact / temp file" | `upload-artifact` |
  | "trigger a repository dispatch event" | `dispatch_repository` |
  | "call a reusable workflow" | `call-workflow` |
  | "post results to PR Checks tab" | `create-check-run` |
  

Stale Reference — update-branch as standalone safe output

• Source: .github/aw/safe-outputs-management.md

• Missing from: N/A — this is a stale entry in SKILL.md

• Details: The mapping row | "mark PR ready", "sync PR branch" | \mark-pull-request-as-ready-for-review`, `update-branch` |treatsupdate-branchas a standalone safe output tool. In the reference docs,update-branchis only an optional boolean *parameter* ofupdate-pull-request:`, not a top-level safe output type.

• Suggested fix: Remove update-branch from the mapping row. Replace with guidance that syncing the PR branch is done via update-pull-request with update-branch: true. For example:

  | "mark PR ready" | `mark-pull-request-as-ready-for-review` |
  | "sync PR branch with base" | `update-pull-request` with `update-branch: true` |
  

No Drift

• ✅ Trigger coverage — All 10 trigger types from triggers.md are represented (pull_request, schedule, slash_command, issues, label_command, workflow_dispatch, deployment_status, workflow_run, fork security, semi-active pattern)
• ✅ Network ecosystem coverage — All 36 ecosystem identifiers from network.md are represented (including bazel, clojure, deno, elixir, fonts, julia, kotlin, lua, node-cdns, ocaml, powershell, r, scala, zig, dev-tools)
• ✅ Pattern coverage — All 18 patterns from patterns.md (including Monitoring with Projects) have mapping rows in Pattern Heuristics
• ✅ Frontmatter field coverage — Generation template defers to create-agentic-workflow.md skeleton; advanced fields (strict, max-turns, max-ai-credits, features, experiments, imports) are correctly omitted from the minimal template
• ✅ Recent change sync — Reference docs and designer files share the same most-recent commit (588de5c), indicating coordinated updates — except for the new automation safe outputs listed above

Methodology

Compared outlines of 8 reference docs against both designer files (SKILL.md and interactive-agent-designer.agent.md).
Reference doc commits (last 7 days): 1
Designer file commits (last 7 days): 1

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🔍 Designer Drift Audit · 119.9 AIC · ⌖ 9.32 AIC · ⊞ 4.8K · ◷

• expires on Jul 8, 2026, 9:13 PM UTC-08:00