[Standup] Daily Standup &mdash; 2026-03-16

**Repos scanned**: 22 | **Mode**: hybrid

> Run: [23138606906](https://github.com/zircote/.github/actions/runs/23138606906) &mdash; 2026-03-16

---

### Summary

| Metric | Count |
|--------|-------|
| Issues closed (24h) | 19 (all automated reports) |
| PRs merged (24h) | 21 (all dependabot) |
| In-progress issues | 0 |
| PRs awaiting review | 5 |
| Blockers | 10 |
| Upcoming milestones (7d) | 0 |

> &#9888;&#65039; **CRITICAL SECURITY ALERT**: `subcog#153` &mdash; AWS key exposed in public git history for **53+ hours** with zero response. Revoke the key immediately.

---

### Yesterday's Completions

#### Issues Closed
All 19 closed issues are automated GPM/alert/CI health reports superseded by new runs &mdash; no human work items were closed.

#### PRs Merged (21 in managed repos &mdash; all Dependabot)

- `.github` #143: ci: bump `softprops/action-gh-release` 2.5.0 &rarr; 2.6.1 (by `@dependabot`[bot])
- `structured-madr` #18: ci: bump `github/gh-aw` (by `@dependabot`[bot])
- 19 additional dependabot dependency bumps across `atlatl`, `atlatl-spec`, `rlm-rs`, `subcog`, `adr`, `adrscope`, `git-adr`, `daedalus`, `MIF`, and other managed repos

#### Releases
- No new releases detected in managed repos (last 24h)

---

### Today's Plan

#### In-Progress Work
- No open issues with `status/in-progress` label found across managed repos

#### Awaiting Review

**Human-authored PRs:**
- `subcog` #152: feat(http): add /healthz endpoint for K8s readiness probes (by `@mgildea` &mdash; external, 8d+, requires 2 approvals per `required_approvals_external: 2`)
- `subcog` #151: fix(otel): stop intercepting OTLP endpoint env var handling (by `@mgildea` &mdash; external, changes requested)
- `github` #15: docs: Fix stale Astro version references 4.x &rarr; 5.x (by `@zircote`, AI-generated via daily-docs-review)

**Dependabot PRs:**
- `atlatl-spec` #191: deps: bump `@redocly/cli` 2.20.4 &rarr; 2.21.1
- `atlatl-spec` #189: deps: bump `astro` (major version)

#### Upcoming Milestones
- No milestones due within 7 days found

---

### Blockers

**&#128308; CRITICAL &mdash; Security**
- `subcog` #153: **AWS Key Exposed in git history** &mdash; reported 2026-03-14T02:27 UTC (~53h ago), no response, no commits, issue still OPEN. Remediation: revoke key at AWS console, remove from `src/security/mod.rs`, purge from git history with `git filter-repo`, rotate dependent services.

**&#128308; CI Failures (ongoing)**

| Repo | Workflow | Age | Root Cause |
|------|----------|-----|------------|
| `atlatl` | CI Checks | ~9d | Clippy 1.94 strict lints + broken doc links |
| `atlatl` | Pipeline | ~8d | ONNX Runtime prebuilt targets dropped |
| `atlatl` | Security Audit | ~3d | `sigstore/cosign-installer` v4.1.0 failure |
| `daedalus` | Security Audit | ~3d | `sigstore/cosign-installer` v4.1.0 failure |
| `atlatl-spec` | Validate Specification | ~13d | Invalid HTML `<br/>` in Mermaid diagram |
| `sdlc-quality` | CI | ~19d | Broken since `chore: update dependabot configuration` (2026-03-01) |
| `vscode-git-adr` | CI | ~18d | `actions/upload-artifact` v6&rarr;v7 breaking change |
| `rlm-rs` | Daily QA | ~1d | `ERR_VALIDATION: Patch file(s) expected but not found` (gh-aw agent misconfiguration) |
| `MIF` | Daily Documentation Review | ~1d | Same `ERR_VALIDATION` root cause as rlm-rs |
| `github-project-manager` | Agentic Maintenance | ~3d | `github/gh-aw` 0.56.2 breaking change |

**Quick batch fixes available:**
- Pin `sigstore/cosign-installer` to SHA `faadad0cce49287aee09b3a48701e75088a2c6ad` (v4.0.0) in `atlatl` + `daedalus`
- Fix gh-aw `AGENT_OUTPUT_TYPES` config in `rlm-rs` Daily QA + `MIF` Daily Documentation Review
- `rlm-rs#124` CI Failure Doctor expires 2026-03-18 (2 days)

---

<details>
<summary>Per-Repo Details (22 repos scanned)</summary>

#### `.github`
- Merged: #143 ci: bump softprops/action-gh-release (dependabot)
- CI Health: &#9989; Healthy (100%)
- Issues closed: Multiple automated reports superseded by new runs

#### `atlatl`
- CI Failures: CI Checks (~9d), Pipeline (~8d), Security Audit (~3d), Code Coverage (cancelled)
- Merged: Multiple dependabot dependency bumps
- CI Health: &#128308; Critical (0%)

#### `atlatl-spec`
- CI Failures: Validate Specification (~13d), Deploy to GitHub Pages (~5d)
- Awaiting review: #191 (deps: bump `@redocly/cli`), #189 (deps: bump astro)
- CI Health: &#128308; Critical (0%)

#### `subcog`
- &#128308; CRITICAL: #153 AWS key exposed, 53h+ unactioned
- Awaiting review: #152 /healthz endpoint (external, 8d+, needs 2 approvals), #151 OTEL fix (changes requested)
- CI Health: &#9989; Healthy (Docker build healthy 2026-03-10)

#### `rlm-rs`
- CI Failure: Daily QA &mdash; gh-aw agent misconfiguration
- CI Health: &#128308; 50%

#### `MIF`
- CI Failure: Daily Documentation Review &mdash; gh-aw agent misconfiguration (new, 2026-03-15T20:54 UTC)

#### `sdlc-quality`
- CI Failure: CI broken since 2026-03-01, ~19d
- Open issue #10: SDLC audit 51+ days open, score 86/100, 2 critical violations
- CI Health: &#128308; Critical (0%)

#### `github-project-manager`
- CI Failure: Agentic Maintenance &mdash; gh-aw 0.56.2 breaking change, ~3d
- CI Health: &#9989; 100% (main CI passing)

#### `vscode-git-adr`
- CI Failure: CI &mdash; `actions/upload-artifact` v6&rarr;v7 breaking change, ~18d
- CI Health: &#128308; Critical (0%)

#### `daedalus`
- CI Failure: Security Audit &mdash; `sigstore/cosign-installer` v4.1.0, ~3d
- CI Health: N/A (no runs on main)

#### `structured-madr`
- Merged: #18 ci: bump github/gh-aw (dependabot)

#### `homebrew-tap`, `ccpkg`, `refactor`, `human-voice`, `rlm-rs-plugin`, `memory-capture-plugin`, `documentation-review`, `adr`, `adrscope`, `git-adr`, `lro-bench`
- No activity in last 24h; CI stale on several (9&ndash;27 days)

</details>

---

*Generated by [daily-standup](https://github.com/zircote/.github/actions/runs/23138606906) workflow &middot; 2026-03-16T10:15 UTC*







> Generated by [Daily Standup](https://github.com/zircote/.github/actions/runs/23138606906) &middot; [&#9719;](https://github.com/search?q=repo%3Azircote%2F.github+is%3Aissue+%22gh-aw-workflow-id%3A+daily-standup%22&type=issues)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Standup] Daily Standup — 2026-03-16 #301

Summary

Yesterday's Completions

Issues Closed

PRs Merged (21 in managed repos — all Dependabot)

Releases

Today's Plan

In-Progress Work

Awaiting Review

Upcoming Milestones

Blockers

`.github`

`atlatl`

`atlatl-spec`

`subcog`

`rlm-rs`

`MIF`

`sdlc-quality`

`github-project-manager`

`vscode-git-adr`

`daedalus`

`structured-madr`

`homebrew-tap`, `ccpkg`, `refactor`, `human-voice`, `rlm-rs-plugin`, `memory-capture-plugin`, `documentation-review`, `adr`, `adrscope`, `git-adr`, `lro-bench`

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Metric	Count
Issues closed (24h)	19 (all automated reports)
PRs merged (24h)	21 (all dependabot)
In-progress issues	0
PRs awaiting review	5
Blockers	10
Upcoming milestones (7d)	0

Repo	Workflow	Age	Root Cause
`atlatl`	CI Checks	~9d	Clippy 1.94 strict lints + broken doc links
`atlatl`	Pipeline	~8d	ONNX Runtime prebuilt targets dropped
`atlatl`	Security Audit	~3d	`sigstore/cosign-installer` v4.1.0 failure
`daedalus`	Security Audit	~3d	`sigstore/cosign-installer` v4.1.0 failure
`atlatl-spec`	Validate Specification	~13d	Invalid HTML `<br/>` in Mermaid diagram
`sdlc-quality`	CI	~19d	Broken since `chore: update dependabot configuration` (2026-03-01)
`vscode-git-adr`	CI	~18d	`actions/upload-artifact` v6→v7 breaking change
`rlm-rs`	Daily QA	~1d	`ERR_VALIDATION: Patch file(s) expected but not found` (gh-aw agent misconfiguration)
`MIF`	Daily Documentation Review	~1d	Same `ERR_VALIDATION` root cause as rlm-rs
`github-project-manager`	Agentic Maintenance	~3d	`github/gh-aw` 0.56.2 breaking change

[Standup] Daily Standup — 2026-03-16 #301

Description

Summary

Yesterday's Completions

Issues Closed

PRs Merged (21 in managed repos — all Dependabot)

Releases

Today's Plan

In-Progress Work

Awaiting Review

Upcoming Milestones

Blockers

.github

atlatl

atlatl-spec

subcog

rlm-rs

MIF

sdlc-quality

github-project-manager

vscode-git-adr

daedalus

structured-madr

homebrew-tap, ccpkg, refactor, human-voice, rlm-rs-plugin, memory-capture-plugin, documentation-review, adr, adrscope, git-adr, lro-bench

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions

`.github`

`atlatl`

`atlatl-spec`

`subcog`

`rlm-rs`

`MIF`

`sdlc-quality`

`github-project-manager`

`vscode-git-adr`

`daedalus`

`structured-madr`

`homebrew-tap`, `ccpkg`, `refactor`, `human-voice`, `rlm-rs-plugin`, `memory-capture-plugin`, `documentation-review`, `adr`, `adrscope`, `git-adr`, `lro-bench`