[Issue Arborist] Run report

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 70

Parent issues created

None. No new orphan cluster of 5+ issues without an existing parent.

Links created

Parent	Sub-issue	Reasoning
#2076	#2067, #2068, #2069, #2070, #2071	The umbrella issue lists these five follow-ups explicitly, but they were not yet linked.
#1283	#2322, #2252, #2040	These are deps-release-notes action-item issues, which is the theme of #1283.

Suggested (not linked — for maintainer review)

• perf(compile): avoid blocking fs reads in the async compile path for the package-config check #2358, fix(compile): surface unreadable repository roots in the package-config check #2359, fix(compile): decide how the package-config check treats symlinked config files #2360 and test(package-feeds): assert the cargo branch of the package-manager wrapper #2357 are package-config-check and package-feeds follow-ups. That is only 4 issues, so I did not create a parent.
• [agent-issue]: Allow agent-supplied priority on work items #2354, [agent-issue]: Agents cannot supply work-item fields; custom-fields is compile-time only, so runtime-computed values never reach ADO #2044 and [agent-issue]: support declarative Azure DevOps pipeline variables in workflow source #2012 are all about agent-supplied or declarative values, such as work-item fields and pipeline variables. They may share a parent, but the relationship is not clear enough to link.
• chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156, chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041 and chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027 are fixture recompile chores that are probably stale.
• 🔴 Red Team Audit — High: shell(git:*) allow-tool rule permits arbitrary command execution via git -c config override #2331, 🔴 Red Team Audit — High: link-work-items area-path target scope silently fail-opens #2261 and 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 are red-team security audits. There are only 3, so I left them unlinked.

Observations

• Several [Parent] issues already exist ([Parent] Compiler internals and pipeline generation improvements (IR types, YAML gen, prompt decoupling) #1286, [Parent] MCPG infrastructure and safe-output tooling improvements #1321, [Parent] Safe-output executor E2E test coverage and tool correctness #1428, [Parent] Track and resolve recurring agentic workflow execution failures (non-rate-limit) #1549, [Parent] Track and resolve recurring AI-credits rate-limit failures in scheduled agentic workflows #1535, [Parent] Track agent runtime and execution pipeline improvements #1649, [Parent] Issue Arborist - Issue Group #1284). I did not link children to them because membership was ambiguous.
• [Parent] Issue Arborist - Issue Group #1284 is an "Issue Arborist" parent with no theme, so it may need cleanup.

Generated by Issue Arborist · auto · 22.4 AIC · ⊞ 5.9K · ◷

• expires on Nov 3, 2026, 8:29 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #2414.