[observability] Observability Coverage Report - 2026-02-20

[github-actions[bot]]

Executive Summary

Over the last 7 days, the log download step returned 10 workflow runs (partial window due to MCP logs tool timeout/limit). Within that sample, 6 runs had firewall_enabled: true and only 3 exposed sandbox/firewall/logs/access.log in artifacts, leaving 3 firewall-enabled runs without the critical access log artifact.

For MCP observability, 4 runs produced MCP artifacts (mcp-logs/*), but none exposed gateway.jsonl (only mcp-logs/rpc-messages.jsonl and mcp-logs/mcp-gateway.log). This means MCP telemetry exists, but not in the expected gateway.jsonl format required by the report criteria.

Key Alerts and Anomalies

🔴 Critical Issues:

• Missing access.log artifacts for 3 firewall-enabled runs (all Issue Monster).
• Missing gateway.jsonl for all 4 MCP-enabled runs (only rpc-messages.jsonl present).

⚠️ Warnings:

• 2 runs are still in progress and have not produced full artifacts yet (Daily Observability Report for AWF Firewall and MCP Gateway, Issue Monster).
• Raw sandbox/ and mcp-logs/ directories are permission-restricted in this environment, so content quality checks are based on run_summary.json artifact lists rather than direct file reads.

Coverage Summary

Component	Runs Analyzed	Logs Present	Coverage	Status
AWF Firewall (access.log)	6	3	50%	🔴
MCP Gateway (gateway.jsonl)	4	0	0%	🔴

Note: MCP-enabled runs do include mcp-logs/rpc-messages.jsonl and mcp-logs/mcp-gateway.log, but not the required gateway.jsonl artifact.

📋 Detailed Run Analysis

Firewall-Enabled Runs

Workflow	Run ID	access.log	Requests	Allowed	Blocked	Status
Issue Monster	22215346914	❌	—	—	—	🔴
Workflow Health Manager - Meta-Orchestrator	22215406972	✅	88	33	55	✅
Go Fan	22215120324	✅	126	42	84	✅
Issue Monster	22214577265	❌	—	—	—	🔴
Auto-Triage Issues	22214019366	✅	83	43	40	✅
Issue Monster	22213951612	❌	—	—	—	🔴

Missing Firewall Logs (access.log)

Workflow	Run ID	Date	Link
Issue Monster	22215346914	2026-02-20	§22215346914
Issue Monster	22214577265	2026-02-20	§22214577265
Issue Monster	22213951612	2026-02-20	§22213951612

MCP-Enabled Runs

Workflow	Run ID	gateway.jsonl	rpc-messages.jsonl	mcp-gateway.log	Status
Workflow Health Manager - Meta-Orchestrator	22215406972	❌	✅	✅	🔴
Go Fan	22215120324	❌	✅	✅	🔴
Auto-Triage Issues	22214019366	❌	✅	✅	🔴
Static Analysis Report	22213980182	❌	✅	✅	🔴

Missing Gateway Logs (gateway.jsonl)

Workflow	Run ID	Date	Link
Workflow Health Manager - Meta-Orchestrator	22215406972	2026-02-20	§22215406972
Go Fan	22215120324	2026-02-20	§22215120324
Auto-Triage Issues	22214019366	2026-02-20	§22214019366
Static Analysis Report	22213980182	2026-02-20	§22213980182

🔍 Telemetry Quality Analysis

Firewall Log Quality

• Total access.log entries analyzed: 297
• Allowed requests: 118
• Blocked requests: 179
• Most accessed domains: api.anthropic.com:443, api.githubcopilot.com:443
• Blocked domains are reported as redacted (-) in this dataset

Gateway Log Quality

• gateway.jsonl not present in any MCP-enabled run artifacts
• Alternate MCP artifacts (mcp-logs/rpc-messages.jsonl, mcp-logs/mcp-gateway.log) exist but were not parsed for structured metrics due to format mismatch with expected gateway.jsonl

Healthy Runs Summary

• Complete firewall coverage (access.log present with counts): Workflow Health Manager - Meta-Orchestrator, Go Fan, Auto-Triage Issues
• MCP artifacts present but missing gateway.jsonl: Workflow Health Manager - Meta-Orchestrator, Go Fan, Auto-Triage Issues, Static Analysis Report

Recommended Actions

1. Ensure Issue Monster runs with firewall_enabled: true always upload sandbox/firewall/logs/access.log.
2. Standardize MCP gateway artifact output to include gateway.jsonl (or update the report criteria if rpc-messages.jsonl is the new canonical source).
3. Re-run the logs download with a higher count or pagination once the MCP logs tool timeout is resolved to cover the full 7-day window.

📊 Historical Trends

• No historical trend data available in this run; recommend persisting daily coverage metrics for week-over-week comparison.

---

Report generated automatically by the Daily Observability Report workflow
Analysis window: Last 7 days | Runs analyzed: 10 (partial due to logs tool timeout/limit)

References: §22215346914 §22215120324 §22214019366

AI generated by Daily Observability Report for AWF Firewall and MCP Gateway

• expires on Feb 21, 2026, 7:56 AM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-02-21T07:56:04.192Z.

Closed by Workflow