From 7dda8f6adebcd392a4acb78de2836d080c04f83a Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 10 Jul 2026 11:16:08 +0000
Subject: [PATCH] [docs] Update glossary - daily scan

Add two new terms from recent commits:
- Disclosure Header (safe-outputs.messages.disclosure-header): AI authorship disclosure prepended to safe-output messages, introduced in fcb847da3
- sandbox.agent.mounts: container mounts for AWF agent sandbox, supporting merge from shared workflow partials, introduced in 9eabba4b1

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 docs/src/content/docs/reference/glossary.md | 22 +++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/docs/src/content/docs/reference/glossary.md b/docs/src/content/docs/reference/glossary.md
index 876c854628a..4e806adf248 100644
--- a/docs/src/content/docs/reference/glossary.md
+++ b/docs/src/content/docs/reference/glossary.md
@@ -127,6 +127,17 @@ Static Analysis Results Interchange Format - a standardized JSON format for repo
 
 Pre-approved actions the AI can take without elevated permissions. The AI generates structured output describing what to create (issues, comments, pull requests), processed by separate permission-controlled jobs. Configured via `safe-outputs:` section, letting AI agents create GitHub content without direct write access.
 
+### Disclosure Header (`safe-outputs.messages.disclosure-header`)
+
+A `safe-outputs.messages` field that prepends an AI authorship disclosure to every message body created by safe outputs (issues, comments, pull requests, and discussions). Set to `true` to use the built-in default text ("Automated content generated by the {workflow_name} workflow"), or provide a custom template string with `{workflow_name}` and `{run_url}` placeholders. When omitted, no disclosure header is added. Configured under `safe-outputs.messages:`.
+
+```aw wrap
+safe-outputs:
+  messages:
+    disclosure-header: true
+  create-issue:
+```
+
 ### Outcome
 
 The observable repository state that follows a [safe output](#safe-outputs). While safe outputs record what a workflow did, outcomes record what happened afterward — whether a pull request was merged, an issue was resolved, or a comment received follow-up activity. Outcome data is based on visible repository state, not on the workflow's self-assessment. See [Outcomes](/gh-aw/reference/outcomes/).
@@ -1213,6 +1224,17 @@ sandbox:
     sudo: false
 ```
 
+### `sandbox.agent.mounts` (`sandbox.agent.mounts`)
+
+A `sandbox.agent` field that specifies additional container mounts for the AWF coding agent sandbox. Each entry uses the format `"source:dest:mode"` (e.g., `"/host/path:/container/path:ro"`). Shared workflow partials can define their own `sandbox.agent.mounts` entries; the compiler merges them additively with the importing workflow's mounts, so partial authors can declare the mounts they need without requiring the importer to know about them. See [Sandbox Configuration](/gh-aw/reference/sandbox/).
+
+```aw wrap
+sandbox:
+  agent:
+    mounts:
+      - /run/docker.sock:/var/run/docker.sock:ro
+```
+
 ### Strict Mode
 
 Enhanced validation mode enforcing additional security checks and best practices. Enabled via `strict: true` in frontmatter or `--strict` flag when compiling.