[docs] Update glossary - daily scan

docs/src/content/docs/reference/glossary.md

@@ -127,6 +127,17 @@ Static Analysis Results Interchange Format - a standardized JSON format for repo
 
 Pre-approved actions the AI can take without elevated permissions. The AI generates structured output describing what to create (issues, comments, pull requests), processed by separate permission-controlled jobs. Configured via `safe-outputs:` section, letting AI agents create GitHub content without direct write access.
 
+### Disclosure Header (`safe-outputs.messages.disclosure-header`)
+
+A `safe-outputs.messages` field that prepends an AI authorship disclosure to every message body created by safe outputs (issues, comments, pull requests, and discussions). Set to `true` to use the built-in default text ("Automated content generated by the {workflow_name} workflow"), or provide a custom template string with `{workflow_name}` and `{run_url}` placeholders. When omitted, no disclosure header is added. Configured under `safe-outputs.messages:`.
+
+```aw wrap
+safe-outputs:
+  messages:
+    disclosure-header: true
+  create-issue:
+```
+
 ### Outcome
 
 The observable repository state that follows a [safe output](#safe-outputs). While safe outputs record what a workflow did, outcomes record what happened afterward — whether a pull request was merged, an issue was resolved, or a comment received follow-up activity. Outcome data is based on visible repository state, not on the workflow's self-assessment. See [Outcomes](/gh-aw/reference/outcomes/).
@@ -1213,6 +1224,17 @@ sandbox:
     sudo: false
 ```
 
+### `sandbox.agent.mounts` (`sandbox.agent.mounts`)
+
+A `sandbox.agent` field that specifies additional container mounts for the AWF coding agent sandbox. Each entry uses the format `"source:dest:mode"` (e.g., `"/host/path:/container/path:ro"`). Shared workflow partials can define their own `sandbox.agent.mounts` entries; the compiler merges them additively with the importing workflow's mounts, so partial authors can declare the mounts they need without requiring the importer to know about them. See [Sandbox Configuration](/gh-aw/reference/sandbox/).
+
+```aw wrap
+sandbox:
+  agent:
+    mounts:
+      - /run/docker.sock:/var/run/docker.sock:ro
+```
+
 ### Strict Mode
 
 Enhanced validation mode enforcing additional security checks and best practices. Enabled via `strict: true` in frontmatter or `--strict` flag when compiling.