gh-aw

Desktop OS: macOS

Typed value: Yes.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Desktop OS: Windows

Typed value: Yes.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Desktop OS: Linux

Typed value: Yes.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Web client

Typed value: No.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Phone access: Native iOS

Typed value: No.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Phone access: Native Android

Typed value: No.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Phone access: Phone browser

Typed value: No.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

CLI

Typed value: Yes.

gh aw compile, logs and audit provide workflow authoring and inspection operations. gh aw mcp-server exposes workflow operations, read-only unless write tools are enabled.

• Cli: gh aw compile, logs and audit provide workflow authoring and inspection operations.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

Coding agents: Claude Code

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Session integration: Compiled workflows launch the configured native engine with declared tools and sandbox policy.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

Coding agents: Codex

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Session integration: Compiled workflows launch the configured native engine with declared tools and sandbox policy.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

Coding agents: Cursor Agent

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Harnesses: Published experimental custom-engine samples launch Cursor Agent, OpenCode 2 and Aider; existing built-in engines retain their own scope.
• Custom adapters: Compiler accepts imported custom engine definitions, including the shipped samples.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. gh-aw: .github/workflows/shared/cursor.md

   Finding: The repository ships publicly importable experimental engine definitions that install/launch Cursor Agent, OpenCode 2 and Aider. They are explicitly unsupported examples for integration authors without a compatibility or maintenance commitment, rather than built-in supported engines. Custom engine definitions are accepted by the compiler.

   Locator

   Shared cursor.md, opencode.md and aider.md; docs/reference/third-party-agent.md Unsupported engine samples

   Retrieved

   2026-11-13

Coding agents: Gemini CLI

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Session integration: Compiled workflows launch the configured native engine with declared tools and sandbox policy.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

Coding agents: OpenCode

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Harnesses: Published experimental custom-engine samples launch Cursor Agent, OpenCode 2 and Aider; existing built-in engines retain their own scope.
• Custom adapters: Compiler accepts imported custom engine definitions, including the shipped samples.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. gh-aw: .github/workflows/shared/cursor.md

   Finding: The repository ships publicly importable experimental engine definitions that install/launch Cursor Agent, OpenCode 2 and Aider. They are explicitly unsupported examples for integration authors without a compatibility or maintenance commitment, rather than built-in supported engines. Custom engine definitions are accepted by the compiler.

   Locator

   Shared cursor.md, opencode.md and aider.md; docs/reference/third-party-agent.md Unsupported engine samples

   Retrieved

   2026-11-13

Coding agents: Pi

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Session integration: Compiled workflows launch the configured native engine with declared tools and sandbox policy.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

Coding agents: Aider

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

• Harnesses: Published experimental custom-engine samples launch Cursor Agent, OpenCode 2 and Aider; existing built-in engines retain their own scope.
• Custom adapters: Compiler accepts imported custom engine definitions, including the shipped samples.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. gh-aw: .github/workflows/shared/cursor.md

   Finding: The repository ships publicly importable experimental engine definitions that install/launch Cursor Agent, OpenCode 2 and Aider. They are explicitly unsupported examples for integration authors without a compatibility or maintenance commitment, rather than built-in supported engines. Custom engine definitions are accepted by the compiler.

   Locator

   Shared cursor.md, opencode.md and aider.md; docs/reference/third-party-agent.md Unsupported engine samples

   Retrieved

   2026-11-13

Coding agents: Antigravity

Typed value: Yes.

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

Checked

2026-11-10 · checked 5 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. gh-aw Antigravity support at v1.2.2

   Finding: gh-aw v1.2.2 ships the native experimental Agy engine and documents engine: agy running Antigravity CLI in GitHub Actions.

   Locator

   docs/src/content/docs/engines/agy.md lines 1-25, v1.2.2, commit 399a445fe2d8926c616b54b1b82a16b5b2be4445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

2. gh-aw Antigravity support at v1.2.2

   Finding: gh-aw v1.2.2 ships the native experimental Agy engine and documents engine: agy running Antigravity CLI in GitHub Actions.

   Locator

   pkg/workflow/agy_engine_execution.go lines 1-30, v1.2.2, commit 399a445fe2d8926c616b54b1b82a16b5b2be4445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

Use my subscription

Typed value: Yes.

A personal Copilot subscription can use COPILOT_GITHUB_TOKEN. Claude subscription OAuth and ChatGPT subscription login are unsupported. Claude and Codex support API credentials and provider-specific inference routes.

• Agent subscriptions: A personal Copilot subscription can use COPILOT_GITHUB_TOKEN. Claude subscription OAuth and ChatGPT subscription login are unsupported.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/engines/copilot.md

   Finding: Personal Copilot subscriptions can be used with COPILOT_GITHUB_TOKEN, separate from organization-billed inference.

   Locator

   Connect your account

   Retrieved

   2026-11-08

Where agents run: On your computer

Typed value: Yes.

Compiled workflows execute on GitHub Actions runners, including user-controlled Linux runners. A runner on the user computer executes there; other self-hosted runners and GitHub-hosted runners remain separate options.

• Local: A user-managed Linux runner on the user computer executes the compiled agent job there; compilation by the CLI alone is not agent execution.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Where agents run: On your own server

Typed value: Yes.

Compiled workflows execute on GitHub Actions runners, including user-controlled Linux runners. A runner on the user computer executes there; other self-hosted runners and GitHub-hosted runners remain separate options.

• Byo remote: Self-hosted Linux container-capable runners can execute the compiled workflow.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Where agents run: In the vendor's cloud

Typed value: Yes.

Compiled workflows execute on GitHub Actions runners, including user-controlled Linux runners. A runner on the user computer executes there; other self-hosted runners and GitHub-hosted runners remain separate options.

• Managed cloud: On GitHub-hosted Actions runners the agent runs in an AWF Docker container by default.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

2. gh-aw: Security architecture

   Finding: The default agent runtime uses Docker container isolation on GitHub-hosted or Linux self-hosted runners, with the Squid proxy as the only egress path. Eligible GitHub-hosted Ubuntu x86_64 KVM runners can instead place the agent in a Cloud Hypervisor microVM (preview).

   Locator

   Agent runtimes; runner topology table

   Retrieved

   2026-11-08

Workspace isolation: Git worktree

Typed value: No.

AWF Docker isolation is the default; opt-in Cloud Hypervisor/NVX preview runtimes use KVM microVMs on eligible runners. The compiler does not provision Git worktrees.

• Worktree: Checkout/branch steps use the workflow workspace, not a product worktree isolation option.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• MicroVM runtimes are previews limited to eligible KVM runners; the default is a Docker container.
• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Workspace isolation: Container

Typed value: Yes.

AWF Docker isolation is the default; opt-in Cloud Hypervisor/NVX preview runtimes use KVM microVMs on eligible runners. The compiler does not provision Git worktrees.

• Container: The default docker runtime runs the agent in a rootless AWF container.
• Vm: Preview cloud-hypervisor (GitHub-hosted Ubuntu x86_64 KVM runners) and nvx runtimes place the agent in a KVM microVM.
• Network: AWF network isolation sends egress only through the proxy to configured domains.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• MicroVM runtimes are previews limited to eligible KVM runners; the default is a Docker container.
• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

2. gh-aw: Security architecture

   Finding: The default agent runtime uses Docker container isolation on GitHub-hosted or Linux self-hosted runners, with the Squid proxy as the only egress path. Eligible GitHub-hosted Ubuntu x86_64 KVM runners can instead place the agent in a Cloud Hypervisor microVM (preview).

   Locator

   Agent runtimes; runner topology table

   Retrieved

   2026-11-08

Workspace isolation: VM or microVM

Typed value: Yes.

AWF Docker isolation is the default; opt-in Cloud Hypervisor/NVX preview runtimes use KVM microVMs on eligible runners. The compiler does not provision Git worktrees.

• Container: The default docker runtime runs the agent in a rootless AWF container.
• Vm: Preview cloud-hypervisor (GitHub-hosted Ubuntu x86_64 KVM runners) and nvx runtimes place the agent in a KVM microVM.
• Network: AWF network isolation sends egress only through the proxy to configured domains.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• MicroVM runtimes are previews limited to eligible KVM runners; the default is a Docker container.
• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

2. gh-aw: Security architecture

   Finding: The default agent runtime uses Docker container isolation on GitHub-hosted or Linux self-hosted runners, with the Squid proxy as the only egress path. Eligible GitHub-hosted Ubuntu x86_64 KVM runners can instead place the agent in a Cloud Hypervisor microVM (preview).

   Locator

   Agent runtimes; runner topology table

   Retrieved

   2026-11-08

Parallel runs

Typed value: Yes.

Workflows on distinct issues/PRs/branches may run concurrently; default per-engine groups serialize each engine.

• Concurrent sessions: Workflows on distinct issues/PRs/branches may run concurrently; default per-engine groups serialize each engine.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/concurrency.md

   Finding: Separate workflows can run concurrently, with default one agent job per engine. Context-specific groups, cancellation and queue:max preserve or cancel pending runs according to trigger configuration.

   Locator

   Per-workflow; Per-engine; Queue behavior

   Retrieved

   2026-11-08

Coordinator

Typed value: Yes.

The product supplies producer/dispatcher agent roles and native queue tools for submitting tasks, dispatching approved worker workflows and inspecting task/claim/result snapshots.

• Roles: Product-owned producer/dispatcher and worker roles have distinct tools and authority.
• Results return: Verified Results and Claims are retained in the authoritative Git-backed queue and visible in activation snapshots.
• Orchestration owner: Native work-queue submission/dispatch and verified worker routes are product orchestration rather than provider-native subagents.
• Invocation: Producer/dispatcher agents use work_queue_submit and work_queue_dispatch_next; read/explain inspect their immutable activation snapshot.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: docs/src/content/docs/reference/work-queue.md

   Finding: Native producer/dispatcher agent roles can submit immutable tasks/dependency graphs and request scheduler-selected assignments to approved worker workflows. work_queue_read/explain inspect the activation snapshot including task, claim and result state. Worker executions are verified/pinned; dependencies consume independently verified Results. Agent tools stage intents; application settlement performs dispatch.

   Locator

   Initialization and authorization; roles and MCP tools; Work/Claim/Result records

   Retrieved

   2026-11-13

Native issue tracking

Typed value: Yes.

The native work queue (tools.work-queue) keeps Work items with dependencies, priorities and attempt state in a Git-backed ledger, separate from individual workflow runs. Operators submit, list, filter, search, dispatch, cancel and reprioritize Work with gh aw work-queue; GitHub Issues can mirror items but are not the store.

• Create: submit-work and submit-graph admit Work items, optionally as a dependency graph.
• Prioritize: Work has a priority (default 3); administrators can reprioritize Work from 1 to 5.
• Search: state --search TEXT searches the queue tree.
• Filter: state filters by graph, pool and state.
• Explicit dispatch: dispatch-next commits assignments and dispatch activates a verified dispatcher workflow for queued Work.
• Task session separation: Work is an immutable task definition; each attempt is a separate Claim bound to a workflow run.
• Durable states: The version-3 transaction log on the queue branch is authoritative and records Claims, Completions and Results.
• External tracker requirement: No external tracker is required: Issues can mirror Work but cannot store the queue.

Checked

2026-11-10 · checked 5 days ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Discussion, labels, assignment to humans, archive and reopen were not established for queue Work. The queue is agent-worker infrastructure rather than a human backlog UI. No installed-product test was run.

1. GitHub Agentic Workflows reference: Work queues (v1.2.2)

   Finding: tools.work-queue is a native Git-backed queue whose transaction log is authoritative; it stores Work task definitions with dependencies, Claims for each attempt, Completions and Results. GitHub Issues can mirror tasks but cannot store the queue.

   Locator

   docs/src/content/docs/reference/work-queue.md lines 6-31 (intro and record table), tag v1.2.2 commit 399a445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

2. GitHub Agentic Workflows reference: Work queue operator commands (v1.2.2)

   Finding: gh aw work-queue offers operator commands to submit Work, list state filtered by graph, pool, state or search text, inspect items, dispatch assignments, cancel Work or Claims and, for administrators, reprioritize Work; a keyboard TUI browses the queue.

   Locator

   docs/src/content/docs/reference/work-queue.md lines 217-252 (Operator commands table), tag v1.2.2 commit 399a445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

Unattended triggers

Typed value: Yes.

Schedule frontmatter can run a recurring workflow such as a daily report. GitHub events can start automation without a human mentioning the agent on every run. Schedules execute through GitHub Actions rather than a local browser or desktop scheduler.

• Schedules: Schedule frontmatter can run a recurring workflow such as a daily report.
• Events: GitHub events can start automation without a human mentioning the agent on every run.
• Scheduler location: Schedules execute through GitHub Actions rather than a local browser or desktop scheduler.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/triggers.md

   Finding: Workflow frontmatter supports scheduled and event-driven repository automation.

   Locator

   Schedules and GitHub event triggers

   Retrieved

   2026-11-08

Shared prompting

Typed value: No.

The scoped workflow runtime accepts its invocation inputs and does not supply multiple humans with a shared live prompting channel. GitHub discussion and follow-on workflows are external platform interactions.

• Coprompting: No product shared live-prompt channel to an existing agent run in the scoped extension/runtime.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Team roles

Typed value: No.

Human authentication and repository authorization belong to GitHub. Native queue observer/producer/worker roles are agent authority, not human workspace roles or product SSO.

• Organization roles: No separate gh-aw human workspace/team-role model.
• Sso: No product SSO implementation; GitHub login and enterprise authentication are external platform dependencies.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

SSO

Typed value: No.

Human authentication and repository authorization belong to GitHub. Native queue observer/producer/worker roles are agent authority, not human workspace roles or product SSO.

• Organization roles: No separate gh-aw human workspace/team-role model.
• Sso: No product SSO implementation; GitHub login and enterprise authentication are external platform dependencies.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Pull request workflow

Typed value: Yes.

create-pull-request safe outputs propose code in a separate permission-scoped job. Workflow examples include CI-failure investigation; automatically triggering CI from generated PRs may require an additional token.

• Pull requests: create-pull-request safe outputs propose code in a separate permission-scoped job.
• Ci response: Workflow examples include CI-failure investigation; automatically triggering CI from generated PRs may require an additional token.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/safe-outputs-pull-requests.md

   Finding: Permission-scoped safe outputs can create and manage pull requests. Policy, credentials and individual output configuration govern each operation.

   Locator

   Create PR; Push; Merge

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Review interface

Typed value: No.

The extension exposes workflow logs, audit reports and output artifacts, not a product UI for reviewing proposed code diffs. GitHub pull-request review is separate.

• Diffs: No product-owned proposed-diff review UI in the scoped extension/runtime; reports and GitHub PR pages are separate.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Product license: Apache-2.0

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: MIT

Typed value: Yes. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: GPL-3.0

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: GPL-3.0-or-later

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: AGPL-3.0

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: AGPL-3.0-or-later

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: Elastic License 2.0

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: Custom terms

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Product license: Proprietary

Typed value: No. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Telemetry opt-out

Typed value: Yes.

gh-aw workflow OTLP telemetry export is configurable and can be disabled by removing workflow/import endpoints and clearing default endpoint secrets/variables. GitHub platform and coding-engine data policies remain separate.

• Telemetry controls: Clear both default endpoint values and remove workflow/import observability.otlp; export becomes a no-op.
• Provider separation: The control disables gh-aw OTLP export, not GitHub operational logs or coding-agent telemetry.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: docs/src/content/docs/reference/open-telemetry.mdx

   Finding: Removing workflow/import observability.otlp and clearing both the secret and variable GH_AW_DEFAULT_OTLP_ENDPOINT disables gh-aw OTLP export. With both endpoint values unset export resolves to an empty endpoint and is a no-op. GitHub platform logs and coding-engine telemetry are separate.

   Locator

   Organization-wide defaults at 101-118; workflow observability.otlp

   Retrieved

   2026-11-13

Free access

Typed value: Yes.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: Free

Typed value: Yes. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: Up to $20/month

Typed value: No. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: $21–40/month

Typed value: No. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: $41–100/month

Typed value: No. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: Over $100/month

Typed value: No. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Starting price: Contact for pricing

Typed value: No. Free.

gh-aw itself is free; model and runner charges remain separate.

• Ongoing free: gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Pricing model: Free, no paid plan

Typed value: Yes.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Pricing model: Free plan

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Pricing model: Subscription

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Pricing model: Per seat

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Pricing model: Usage-based

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Pricing model: Per machine or compute

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Pricing model: Bring your own key

Typed value: Yes.

A personal Copilot subscription can use COPILOT_GITHUB_TOKEN. Claude subscription OAuth and ChatGPT subscription login are unsupported. Claude and Codex support API credentials and provider-specific inference routes.

• Agent subscriptions: A personal Copilot subscription can use COPILOT_GITHUB_TOKEN. Claude subscription OAuth and ChatGPT subscription login are unsupported.
• Api accounts: Claude and Codex support API credentials and provider-specific inference routes.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines/claude.md

   Finding: Claude supports API/WIF or Copilot inference, not Claude subscription OAuth. dontAsk is default, tools.edit false denies edits, and MCP gateway permissions remain separate from agent approval modes.

   Locator

   Authentication; Permissions; Recovery

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/engines/codex.md

   Finding: Codex uses OpenAI API credentials or Copilot inference; ChatGPT subscription login is unsupported. Per-command Bash allowlists are unavailable for Codex.

   Locator

   Authentication; Limitations

   Retrieved

   2026-11-08

Pricing model: One-time purchase

Typed value: No.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Workspace fees: No fee for the scoped MIT extension/compiler software; platform runner and inference charges are separate.
• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

Paid plans from: No paid plan

Typed value: Yes. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: $10 or less/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: $11–20/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: $21–40/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: $41–100/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: Over $100/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plans from: Contact sales

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Keeps going with laptop closed

Typed value: Yes.

Compiled workflows execute on GitHub Actions runners, including user-controlled Linux runners. A runner on the user computer executes there; other self-hosted runners and GitHub-hosted runners remain separate options.

• Client disconnect: Event and scheduled workflows execute on the Actions runner after the initiating client disconnects.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/triggers.md

   Finding: Workflow frontmatter supports scheduled and event-driven repository automation.

   Locator

   Schedules and GitHub event triggers

   Retrieved

   2026-11-08

Open-source license

Typed value: Yes. MIT.

The gh-aw compiler and runtime repository use MIT.

• Client license: The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

Any desktop app

Typed value: Yes.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

Paid plan up to $20/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Paid plan up to $40/month

Typed value: No. No paid plan.

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

• Model cost: Inference is charged by the selected provider or Copilot plan, separate from Actions minutes.
• Compute cost: GitHub Actions compute minutes are separate from model inference.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

Any phone client

Typed value: No.

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

• Desktop os: Native release extension binaries cover macOS, Windows and Linux; Windows installer uses Git Bash/MSYS/Cygwin.
• Mobile apps: No native iOS/Android application; Android Termux CLI installation is not a native phone app.
• Browser: GitHub workflow pages are the external platform UI; the extension does not supply an ADE browser client.
• Mobile browser: No product-owned phone-browser ADE interface.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:ACC-01

gh aw ships a native GitHub CLI extension for macOS, Windows and Linux; this is CLI/TUI access, not a separate desktop GUI. It supplies no released product browser or native phone app.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:ACC-02

Built-in engines and custom imported definitions are separate. Public experimental samples launch Cursor Agent, OpenCode and Aider without compatibility guarantees; these are runnable integrations, not supported built-in engines.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.
• The released Agy engine is experimental, Linux x64 only, and supports Gemini API keys rather than Google WIF, ADC or Vertex AI. It cannot disable native shell, editing or web tools.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

2. gh-aw Antigravity support at v1.2.2

   Finding: gh-aw v1.2.2 ships the native experimental Agy engine and documents engine: agy running Antigravity CLI in GitHub Actions.

   Locator

   docs/src/content/docs/engines/agy.md lines 1-25, v1.2.2, commit 399a445fe2d8926c616b54b1b82a16b5b2be4445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

3. gh-aw Antigravity support at v1.2.2

   Finding: gh-aw v1.2.2 ships the native experimental Agy engine and documents engine: agy running Antigravity CLI in GitHub Actions.

   Locator

   pkg/workflow/agy_engine_execution.go lines 1-30, v1.2.2, commit 399a445fe2d8926c616b54b1b82a16b5b2be4445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

4. gh-aw: .github/workflows/shared/cursor.md

   Finding: The repository ships publicly importable experimental engine definitions that install/launch Cursor Agent, OpenCode 2 and Aider. They are explicitly unsupported examples for integration authors without a compatibility or maintenance commitment, rather than built-in supported engines. Custom engine definitions are accepted by the compiler.

   Locator

   Shared cursor.md, opencode.md and aider.md; docs/reference/third-party-agent.md Unsupported engine samples

   Retrieved

   2026-11-13

gh-aw:ACC-03

A personal Copilot subscription can use COPILOT_GITHUB_TOKEN. Claude subscription OAuth and ChatGPT subscription login are unsupported. Claude and Codex support API credentials and provider-specific inference routes.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines/claude.md

   Finding: Claude supports API/WIF or Copilot inference, not Claude subscription OAuth. dontAsk is default, tools.edit false denies edits, and MCP gateway permissions remain separate from agent approval modes.

   Locator

   Authentication; Permissions; Recovery

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/engines/codex.md

   Finding: Codex uses OpenAI API credentials or Copilot inference; ChatGPT subscription login is unsupported. Per-command Bash allowlists are unavailable for Codex.

   Locator

   Authentication; Limitations

   Retrieved

   2026-11-08

3. GitHub Agentic Workflows docs/src/content/docs/engines/copilot.md

   Finding: Personal Copilot subscriptions can be used with COPILOT_GITHUB_TOKEN, separate from organization-billed inference.

   Locator

   Connect your account

   Retrieved

   2026-11-08

gh-aw:ACC-04

Install the extension, select/authenticate an engine, add Markdown workflow source and compile its lock file. The generated workflow runs on GitHub Actions against the configured repository.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

gh-aw:ACC-05

gh aw compile, logs and audit provide workflow authoring and inspection operations. gh aw mcp-server exposes workflow operations, read-only unless write tools are enabled.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

3. GitHub Agentic Workflows docs/src/content/docs/reference/gh-aw-as-mcp-server.md

   Finding: gh aw mcp-server exposes workflow-management CLI operations as MCP tools, read-only by default; writes require --allow-write-tools.

   Locator

   Configuration; Available tools

   Retrieved

   2026-11-08

gh-aw:ACC-06

Declared MCP servers are filtered through the configured gateway tool allowlist. Engine-specific plugins are supported where listed; agent plugins remain experimental. Gateway allowlists constrain MCP calls independently of Claude permission mode.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/engines/claude.md

   Finding: Claude supports API/WIF or Copilot inference, not Claude subscription OAuth. dontAsk is default, tools.edit false denies edits, and MCP gateway permissions remain separate from agent approval modes.

   Locator

   Authentication; Permissions; Recovery

   Retrieved

   2026-11-08

gh-aw:PLAN-01

Workflow Markdown holds natural-language task instructions; YAML frontmatter sets triggers and policy. Issues, PRs, comments and other configured GitHub events can trigger workflows.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/triggers.md

   Finding: Workflow frontmatter supports scheduled and event-driven repository automation.

   Locator

   Schedules and GitHub event triggers

   Retrieved

   2026-11-08

gh-aw:PLAN-04

Cache-memory persists declared files between runs with workflow scope/retention.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cache-memory.md

   Finding: Workflow cache-memory persists declared files across workflow runs with configured scope and retention.

   Locator

   Cache memory

   Retrieved

   2026-11-08

gh-aw:PLAN-06

The native work queue (tools.work-queue) keeps Work items with dependencies, priorities and attempt state in a Git-backed ledger, separate from individual workflow runs. Operators submit, list, filter, search, dispatch, cancel and reprioritize Work with gh aw work-queue; GitHub Issues can mirror items but are not the store.

Checked

2026-11-10 · checked 5 days ago

Cross-check

cross-checked 2026-11-10

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Discussion, labels, assignment to humans, archive and reopen were not established for queue Work. The queue is agent-worker infrastructure rather than a human backlog UI. No installed-product test was run.

1. GitHub Agentic Workflows reference: Work queues (v1.2.2)

   Finding: tools.work-queue is a native Git-backed queue whose transaction log is authoritative; it stores Work task definitions with dependencies, Claims for each attempt, Completions and Results. GitHub Issues can mirror tasks but cannot store the queue.

   Locator

   docs/src/content/docs/reference/work-queue.md lines 6-31 (intro and record table), tag v1.2.2 commit 399a445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

2. GitHub Agentic Workflows reference: Work queue operator commands (v1.2.2)

   Finding: gh aw work-queue offers operator commands to submit Work, list state filtered by graph, pool, state or search text, inspect items, dispatch assignments, cancel Work or Claims and, for administrators, reprioritize Work; a keyboard TUI browses the queue.

   Locator

   docs/src/content/docs/reference/work-queue.md lines 217-252 (Operator commands table), tag v1.2.2 commit 399a445

   Retrieved

   2026-11-10

   Source date

   2026-11-10

gh-aw:COORD-01

Workflows on distinct issues/PRs/branches may run concurrently; default per-engine groups serialize each engine.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/concurrency.md

   Finding: Separate workflows can run concurrently, with default one agent job per engine. Context-specific groups, cancellation and queue:max preserve or cancel pending runs according to trigger configuration.

   Locator

   Per-workflow; Per-engine; Queue behavior

   Retrieved

   2026-11-08

gh-aw:COORD-02

queue:max and cancel-in-progress settings determine pending-run retention and obsolete-PR cancellation.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/concurrency.md

   Finding: Separate workflows can run concurrently, with default one agent job per engine. Context-specific groups, cancellation and queue:max preserve or cancel pending runs according to trigger configuration.

   Locator

   Per-workflow; Per-engine; Queue behavior

   Retrieved

   2026-11-08

gh-aw:COORD-03

The product supplies producer/dispatcher agent roles and native queue tools for submitting tasks, dispatching approved worker workflows and inspecting task/claim/result snapshots.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: docs/src/content/docs/reference/work-queue.md

   Finding: Native producer/dispatcher agent roles can submit immutable tasks/dependency graphs and request scheduler-selected assignments to approved worker workflows. work_queue_read/explain inspect the activation snapshot including task, claim and result state. Worker executions are verified/pinned; dependencies consume independently verified Results. Agent tools stage intents; application settlement performs dispatch.

   Locator

   Initialization and authorization; roles and MCP tools; Work/Claim/Result records

   Retrieved

   2026-11-13

gh-aw:COORD-04

Schedule frontmatter can run a recurring workflow such as a daily report. GitHub events can start automation without a human mentioning the agent on every run. Schedules execute through GitHub Actions rather than a local browser or desktop scheduler.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/triggers.md

   Finding: Workflow frontmatter supports scheduled and event-driven repository automation.

   Locator

   Schedules and GitHub event triggers

   Retrieved

   2026-11-08

gh-aw:RUN-01

Compiled workflows execute on GitHub Actions runners, including user-controlled Linux runners. A runner on the user computer executes there; other self-hosted runners and GitHub-hosted runners remain separate options.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

3. GitHub Agentic Workflows docs/src/content/docs/reference/triggers.md

   Finding: Workflow frontmatter supports scheduled and event-driven repository automation.

   Locator

   Schedules and GitHub event triggers

   Retrieved

   2026-11-08

4. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

5. gh-aw: Security architecture

   Finding: The default agent runtime uses Docker container isolation on GitHub-hosted or Linux self-hosted runners, with the Squid proxy as the only egress path. Eligible GitHub-hosted Ubuntu x86_64 KVM runners can instead place the agent in a Cloud Hypervisor microVM (preview).

   Locator

   Agent runtimes; runner topology table

   Retrieved

   2026-11-08

6. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:RUN-02

AWF Docker isolation is the default; opt-in Cloud Hypervisor/NVX preview runtimes use KVM microVMs on eligible runners. The compiler does not provision Git worktrees.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• MicroVM runtimes are previews limited to eligible KVM runners; the default is a Docker container.
• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

2. gh-aw: Security architecture

   Finding: The default agent runtime uses Docker container isolation on GitHub-hosted or Linux self-hosted runners, with the Squid proxy as the only egress path. Eligible GitHub-hosted Ubuntu x86_64 KVM runners can instead place the agent in a Cloud Hypervisor microVM (preview).

   Locator

   Agent runtimes; runner topology table

   Retrieved

   2026-11-08

3. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:RUN-03

Experimental engine.durable saves/restores native session checkpoints in artifacts, default seven days subject to repository retention. Checkpoint format and resume behavior differ by engine; durable mode does not automatically dispatch a continuation.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

gh-aw:RUN-05

Top-level max-turns defaults to 500 for supported engines; Agy lacks this limit. max-ai-credits bounds catalog-estimated inference consumption through the proxy. Claude recovery resumes the exact session; silent fresh restart after progress requires an explicit override.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/engines/claude.md

   Finding: Claude supports API/WIF or Copilot inference, not Claude subscription OAuth. dontAsk is default, tools.edit false denies edits, and MCP gateway permissions remain separate from agent approval modes.

   Locator

   Authentication; Permissions; Recovery

   Retrieved

   2026-11-08

3. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

gh-aw:RUN-06

gh aw logs and audit expose per-run duration, token/credit usage and tool/session information.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

gh-aw:RUN-07

AI Credits estimate inference per workflow run; Actions compute is a separate cost component. Credit estimates use catalog prices and do not reconcile the providers invoice. Structured logs JSON includes per-run aic and episode total_aic fields.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

gh-aw:RUN-08

Workflow and engine concurrency groups bound overlap and preserve queued work where configured. PR updates can cancel outdated runs; mixed trigger queue behavior is documented separately.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/concurrency.md

   Finding: Separate workflows can run concurrently, with default one agent job per engine. Context-specific groups, cancellation and queue:max preserve or cancel pending runs according to trigger configuration.

   Locator

   Per-workflow; Per-engine; Queue behavior

   Retrieved

   2026-11-08

gh-aw:TEAM-01

The scoped workflow runtime accepts its invocation inputs and does not supply multiple humans with a shared live prompting channel. GitHub discussion and follow-on workflows are external platform interactions.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:TEAM-02

Human authentication and repository authorization belong to GitHub. Native queue observer/producer/worker roles are agent authority, not human workspace roles or product SSO.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:TEAM-03

The gateway applies explicit tool allowlists; engine-level tool enforcement differs by engine. Firewall allowlists and scoped safe-output jobs provide configured isolation/write controls. Agents default to read-only access; GitHub mutations normally occur in separately scoped safe-output jobs.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/engines/claude.md

   Finding: Claude supports API/WIF or Copilot inference, not Claude subscription OAuth. dontAsk is default, tools.edit false denies edits, and MCP gateway permissions remain separate from agent approval modes.

   Locator

   Authentication; Permissions; Recovery

   Retrieved

   2026-11-08

3. GitHub Agentic Workflows docs/src/content/docs/engines/codex.md

   Finding: Codex uses OpenAI API credentials or Copilot inference; ChatGPT subscription login is unsupported. Per-command Bash allowlists are unavailable for Codex.

   Locator

   Authentication; Limitations

   Retrieved

   2026-11-08

4. GitHub Agentic Workflows docs/src/content/docs/introduction/architecture.mdx

   Finding: Agent execution, sandbox firewall, tool gateway and validated safe-output jobs form separate trust boundaries. Controls are configurable.

   Locator

   Architecture; permission-scoped jobs

   Retrieved

   2026-11-08

5. GitHub Agentic Workflows docs/src/content/docs/reference/sandbox.md

   Finding: The default docker runtime runs the agent in a rootless AWF container with network isolation; preview cloud-hypervisor and nvx runtimes use KVM microVMs. Filesystem mounts and outbound network allowlists are configurable. The page does not itself describe the GitHub runner as a VM.

   Locator

   Sandbox; Firewall; Runtime settings

   Retrieved

   2026-11-08

gh-aw:SHIP-01

The extension exposes workflow logs, audit reports and output artifacts, not a product UI for reviewing proposed code diffs. GitHub pull-request review is separate.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/engines.md

   Finding: Built-in engines include Copilot, Claude Code, Codex, deprecated Gemini CLI and Pi. Experimental durable mode checkpoints native sessions in artifacts; max-turns and AI-credit limits vary by engine.

   Locator

   Built-in engines; Durable runs; Limits

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

3. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:SHIP-02

Workflow configuration separates deterministic CI jobs from agent reasoning and permitted outputs.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows README.md

   Finding: The gh aw extension compiles Markdown/YAML repository automation into GitHub Actions workflows with configurable agents, read-only sandbox defaults and separate safe-output jobs.

   Locator

   Overview; Security

   Retrieved

   2026-11-08

gh-aw:SHIP-03

create-pull-request safe outputs propose code in a separate permission-scoped job. Workflow examples include CI-failure investigation; automatically triggering CI from generated PRs may require an additional token.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/safe-outputs-pull-requests.md

   Finding: Permission-scoped safe outputs can create and manage pull requests. Policy, credentials and individual output configuration govern each operation.

   Locator

   Create PR; Push; Merge

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

gh-aw:SHIP-04

Merge operations are separately configured safe outputs with scoped credentials; PR creation alone does not grant merging.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/safe-outputs-pull-requests.md

   Finding: Permission-scoped safe outputs can create and manage pull requests. Policy, credentials and individual output configuration govern each operation.

   Locator

   Create PR; Push; Merge

   Retrieved

   2026-11-08

gh-aw:OWN-01

The gh-aw compiler and runtime repository use MIT.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows LICENSE

   Finding: The gh-aw repository code is MIT licensed.

   Locator

   MIT grant

   Retrieved

   2026-11-08

gh-aw:OWN-02

The product code and execution worker can run on user-controlled runners, but GitHub Actions supplies workflow control, triggers, secrets and logs. A self-managed execution worker alone does not establish a fully self-hosted core ADE; a complete user-managed control-plane deployment is unestablished by this source pass.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

2. gh-aw: install-gh-aw.sh

   Finding: The install script provides native extension binaries for Linux, macOS, Windows and other hosts. gh aw is a CLI/compiler plus GitHub Actions runtime, not a standalone browser/phone app or diff review interface. It executes agent work on configured Actions runners; a self-hosted runner can be on a user computer. Source checkout is managed by the workflow, with no worktree provisioning. GitHub supplies human accounts, repository permissions, SSO, workflow control and logs; no separate human-team or shared live-prompt service is implemented by the extension.

   Locator

   OS case 115-139; cmd/gh-aw and pkg/cli command registration; compiler/runtime; docs/reference/faq

   Retrieved

   2026-11-13

gh-aw:OWN-03

gh-aw workflow OTLP telemetry export is configurable and can be disabled by removing workflow/import endpoints and clearing default endpoint secrets/variables. GitHub platform and coding-engine data policies remain separate.

Checked

2026-11-13 · checked 2 days ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• Source review and pinned implementation inspection only; no installed-product, account or multi-user scenario was executed. Unanswered atomic questions remain open.

1. gh-aw: docs/src/content/docs/reference/open-telemetry.mdx

   Finding: Removing workflow/import observability.otlp and clearing both the secret and variable GH_AW_DEFAULT_OTLP_ENDPOINT disables gh-aw OTLP export. With both endpoint values unset export resolves to an empty endpoint and is a no-op. GitHub platform logs and coding-engine telemetry are separate.

   Locator

   Organization-wide defaults at 101-118; workflow observability.otlp

   Retrieved

   2026-11-13

gh-aw:OWN-04

The gh-aw extension/compiler is free MIT software without a paid extension plan. Inference is billed by the chosen provider/Copilot plan and Actions compute minutes remain separate.

Checked

2026-11-08 · checked 1 week ago

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

399a445fe2d8926c616b54b1b82a16b5b2be4445

• No provider or Actions compute price is inferred from the software license.

1. GitHub Agentic Workflows docs/src/content/docs/reference/cost-management.md

   Finding: Per-run logs/audit reports display tokens, duration and AI-credit estimates. One AIC represents $0.01 of catalog-estimated inference, distinct from Actions compute and provider invoices.

   Locator

   AI Credits; logs; guardrails

   Retrieved

   2026-11-08

2. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

3. gh-aw MIT license

   Finding: The main extension/compiler software is MIT licensed and explicitly permits use free of charge; Actions runner compute and inference plans are separate dependencies.

   Locator

   MIT License grant

   Retrieved

   2026-11-13

gh-aw:OWN-06

Release v1.2.1 dated 2026-11-06 adds experimental artifact-backed continuation and workflow fixes.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows v1.2.1

   Finding: Public release v1.2.1 was published 2026-11-06.

   Locator

   Release heading and notes

   Retrieved

   2026-11-08

   Source date

   2026-11-06

gh-aw:OWN-08

gh-aw itself is free; model and runner charges remain separate.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08

gh-aw:OWN-09

The application adds no platform charge; inference and Actions minutes remain separate billed units.

Checked

2026-11-08 · checked 1 week ago

Cross-check

cross-checked 2026-11-08

Plan

Not specified in this finding

Surface

gh aw CLI and compiled GitHub Actions workflows

Version

Repository 57111b2d03d5be9a30a998f518c9712700ebfa63; first-party source pass 2026-11-08.

• Only the cited atomic findings are established. Remaining atomic requirements and the full rubric scenario remain unverified.

1. GitHub Agentic Workflows docs/src/content/docs/reference/faq.md

   Finding: gh-aw is free with separate inference and Actions compute charges. It requires Linux container-capable runners, can use self-hosted runners, and retains GitHub workflow dependencies.

   Locator

   Cost; runners; setup; limitations

   Retrieved

   2026-11-08