[Issue Arborist] Weekly run

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 68

Parent issues created

None — no unparented cluster of 5+ issues without an existing parent.

Links created

Parent	Sub-issue	Reasoning
#2076	#2067, #2068, #2069, #2070, #2071	Parent body explicitly enumerates these five follow-ups; they were not yet linked.
#1283	#2322, #2252, #2040	Upstream dependency release-note action items (copilot-cli, awf, mcpg), matching the parent's theme.

Suggested (not linked — for maintainer review)

• [agent-issue]: Agents cannot supply work-item fields; custom-fields is compile-time only, so runtime-computed values never reach ADO #2044 and [agent-issue]: Allow agent-supplied priority on work items #2354 (agent-supplied work-item fields / priority): related, but only two issues, no parent.
• perf(compile): avoid blocking fs reads in the async compile path for the package-config check #2358, fix(compile): surface unreadable repository roots in the package-config check #2359, fix(compile): decide how the package-config check treats symlinked config files #2360, test(package-feeds): assert the cargo branch of the package-manager wrapper #2357 (package-config check follow-ups): a cluster of 4 under 5, no parent.
• chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027, chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041, chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156 (fixture recompiles) are stale chores; consider closing.

Observations

• Several older parent issues ([Parent] Issue Arborist - Issue Group #1284, [Parent] Compiler internals and pipeline generation improvements (IR types, YAML gen, prompt decoupling) #1286, [Parent] MCPG infrastructure and safe-output tooling improvements #1321, [Parent] Safe-output executor E2E test coverage and tool correctness #1428, [Parent] Track and resolve recurring AI-credits rate-limit failures in scheduled agentic workflows #1535, [Parent] Track and resolve recurring agentic workflow execution failures (non-rate-limit) #1549, [Parent] Track agent runtime and execution pipeline improvements #1649) are themselves unparented; their children seem already linked.
• 🔴 Red Team Audit — High: link-work-items area-path target scope silently fail-opens #2261, 🔴 Red Team Audit — High: shell(git:*) allow-tool rule permits arbitrary command execution via git -c config override #2331, 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 are security audit findings that could share a tracking parent.

Generated by Issue Arborist · auto · 22.3 AIC · ⊞ 5.6K · ◷

• expires on Nov 1, 2026, 8:31 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #2402.