[observability] Observability Coverage Report - 2026-07-02

[github-actions[bot]]

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection engine failed to produce results.

Review the workflow run logs for details.

Executive Summary

I sampled 5 recent workflow runs from the last 7 days. No firewall-enabled workflow runs were present in the downloaded sample, so AWF Firewall coverage is N/A for this report window. Two runs did expose MCP telemetry via rpc-messages.jsonl, which is the accepted fallback when gateway.jsonl is absent, and both were healthy.

Key Alerts and Anomalies

No critical issues detected in the sampled MCP runs. The only coverage gap is firewall visibility: no firewall-enabled runs were found in the sampled week, so there was no access.log data to validate.

Coverage Summary

Component	Runs Analyzed	Logs Present	Coverage	Status
AWF Firewall (access.log)	0	0	N/A	N/A
MCP Gateway (gateway.jsonl or rpc-messages.jsonl)	2	2	100%	Healthy

Detailed Run Analysis

MCP-Enabled Runs

Workflow	Run ID	Telemetry Source	Entries	Servers	Tool Calls	Errors	Status
AI Moderator	28552533376	rpc-messages.jsonl	6	2	0	0	Healthy
Linter Miner	28537698100	rpc-messages.jsonl	44	2	3	0	Healthy

Firewall-Enabled Runs

No firewall-enabled workflow runs were found in the past 7 days.

Telemetry Quality

• rpc-messages.jsonl was present for both MCP-enabled runs and parsed cleanly.
• No gateway.jsonl files were present in the sampled MCP runs, so the canonical fallback path was used.
• No parse errors or MCP response errors were observed in the sampled telemetry.

Recommended Actions

1. Keep rpc-messages.jsonl as the fallback telemetry source for MCP runs until gateway.jsonl is emitted consistently.
2. If firewall reporting is expected in this repo, ensure at least one active workflow run produces access.log within the 7-day window.
3. Add or retain a validation step that flags any firewall-enabled run missing access.log as critical.

References:

• §28552533376
• §28537698100
• §28510937372

---

Report generated automatically by the Daily Observability Report workflow
Analysis window: Last 7 days | Runs sampled: 5

Generated by 📊 Daily Observability Report for AWF Firewall and MCP Gateway · 45.7 AIC · ⊞ 12.6K · ◷

• expires on Jul 2, 2026, 4:18 PM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by Daily Observability Report for AWF Firewall and MCP Gateway.

A newer discussion is available at Discussion #43059.