Skip to content

SPDD spec sync: fixture traceability, outcome-eval crosswalk, and OTLP credential redaction norms - #49596

Merged
pelikhan merged 2 commits into
mainfrom
copilot/spdd-daily-spec-work-plan-2026-08-01
Aug 1, 2026
Merged

SPDD spec sync: fixture traceability, outcome-eval crosswalk, and OTLP credential redaction norms#49596
pelikhan merged 2 commits into
mainfrom
copilot/spdd-daily-spec-work-plan-2026-08-01

Conversation

Copilot AI commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Daily SPDD review flagged sync drift risks across intent-attribution, replace-label compliance, and outcome-evaluation/OTel specs. This PR tightens spec-to-fixture/spec-to-test traceability and aligns provenance + outcome semantics across the related documents.

  • Intent-attribution fixture traceability

    • Updated specs/intent-attribution-agent-governance.md RFC 2119 fixture list to reference explicit fixture paths under specs/intent-attribution-compliance/ to keep governance and conformance artifacts directly linked.
  • Replace-label compliance parity documentation

    • Added a dated parity note in specs/replace-label-compliance/README.md confirming Behavioral Coverage Map parity with pkg/workflow/replace_label_formal_test.go (P1–P15 + 3 edge cases).
    • Added a fixture linkage checklist in specs/replace-label-spec.md §9.2 mapping T-RL-020T-RL-025 to rl-001/rl-002/rl-003 fixtures.
  • Outcome evaluation spec crosswalk + provenance clarification

    • In specs/safe-output-outcome-evaluation.md, clarified Provenance Limits for GitHub App/bot-visible activity handling in human_* fields.
    • Added a “Sync Follow-ups”-style table mapping all 30 safe-output sections to concrete compliance test files or not-started.
    • Added a Change Log entry and cross-linked to OTel spec updates.
  • OTel outcome semantics + security tightening

    • In specs/otel-observability-spec.md §13, aligned outcome attributes toward gh-aw.outcome.repo (with compatibility alias guidance) and referenced canonical outcome taxonomy.
    • In §15, added explicit MUST/MUST NOT redaction requirements for OTEL_EXPORTER_OTLP_HEADERS and equivalent credential-bearing headers in direct-export mode.
    • Added reciprocal Change Log cross-reference to the outcome-evaluation spec.
- §30 `replace_label` -> `pkg/cli/outcome_eval_update_test.go`, `pkg/workflow/replace_label_formal_test.go` (covered)
- §21 `autofix_code_scanning_alert` -> not-started

Copilot AI linked an issue Aug 1, 2026 that may be closed by this pull request
9 tasks
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Update daily SPDD spec work plan for 2026-08-01 SPDD spec sync: fixture traceability, outcome-eval crosswalk, and OTLP credential redaction norms Aug 1, 2026
Copilot AI requested a review from pelikhan August 1, 2026 16:33
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Nice work on the spec sync! 👏 This PR tightens the traceability between formal specs and test coverage across intent-attribution, replace-label compliance, outcome evaluation, and OTel observability—exactly what the SPDD daily review flagged.

The changes are:

  • ✅ Well-focused: All updates are spec documentation and cross-referencing, no unrelated changes.
  • ✅ Clearly motivated: The body explains the drift risks and how each section addresses them.
  • ✅ Comprehensive: Fixture linkage checklists (§9.2), compatibility guidance (OTel), provenance rules (outcome-eval), and security tightening (OTEL_EXPORTER_OTLP_HEADERS redaction) are all aligned.

This looks ready for review!

Generated by ✅ Contribution Check · auto · 48.4 AIC · ⌖ 16.6 AIC · ⊞ 8.7K ·

@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

PR Triage

  • Category: docs
  • Risk: low
  • Priority: low
  • Score: 31/100 (Impact15/Urgency8/Quality8)
  • Recommended action: defer

Draft; SPDD spec sync incl. OTel outcome/redaction norms. OTEL-FLAGGED.

Generated by 🔧 PR Triage Agent · auto · 73.4 AIC · ⌖ 10.1 AIC · ⊞ 8K ·

@github-actions github-actions Bot added the otel label Aug 1, 2026
@github-actions

github-actions Bot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

cc @mnkeifer — this PR is OpenTelemetry-related and has been labeled otel per customer triage policy. (Note: no assignee-management tool is available to safe-outputs in this workflow; please self-assign or ask a maintainer to assign.)

Generated by 🔧 PR Triage Agent · auto · 73.4 AIC · ⌖ 10.1 AIC · ⊞ 8K ·

@pelikhan
pelikhan marked this pull request as ready for review August 1, 2026 19:29
Copilot AI review requested due to automatic review settings August 1, 2026 19:29
@pelikhan
pelikhan merged commit fc9950d into main Aug 1, 2026
1 check passed
@pelikhan
pelikhan deleted the copilot/spdd-daily-spec-work-plan-2026-08-01 branch August 1, 2026 19:29

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Aligns SPDD specifications across fixture traceability, outcome evaluation, provenance, and OTLP credential handling.

Changes:

  • Adds fixture and compliance-test cross-references.
  • Clarifies bot/app provenance and outcome taxonomy.
  • Strengthens OTLP credential-redaction requirements.
Show a summary per file
File Description
specs/safe-output-outcome-evaluation.md Adds provenance rules, test mapping, and changelog.
specs/replace-label-spec.md Maps test IDs to compliance fixtures.
specs/replace-label-compliance/README.md Records behavioral coverage parity.
specs/otel-observability-spec.md Aligns outcome attributes and redaction norms.
specs/intent-attribution-agent-governance.md Adds explicit fixture paths.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 5/5 changed files
  • Comments generated: 5
  • Review effort level: Balanced

@@ -3,7 +3,7 @@ title: Safe Output Outcome Evaluation Specification
version: 1.0.0
Comment on lines +787 to +789
| §1 | `create_pull_request` | `pkg/cli/outcome_eval_formal_test.go` | covered |
| §2 | `create_issue` | `pkg/cli/outcome_eval_formal_test.go` | covered |
| §3 | `add_comment` | `pkg/cli/outcome_eval_formal_test.go` | covered |

Fixture linkage check (2026-08-01):

- [x] T-RL-020 covered by `specs/replace-label-compliance/rl-001-glob-semantics.yaml`
- [x] T-RL-020 covered by `specs/replace-label-compliance/rl-001-glob-semantics.yaml`
- [x] T-RL-021 covered by `specs/replace-label-compliance/rl-001-glob-semantics.yaml`
- [x] T-RL-022 covered by `specs/replace-label-compliance/rl-001-glob-semantics.yaml`
- [x] T-RL-023 covered by `specs/replace-label-compliance/rl-001-glob-semantics.yaml` and `specs/replace-label-compliance/rl-003-blocklist-ordering.yaml`
- `explicit-intent-wins.yaml`
- `ambiguous-root-closing-issues.yaml`
- `unlinked-pr-fail-closed.yaml`
- `specs/intent-attribution-compliance/explicit-intent-wins.yaml`
@github-actions

github-actions Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in a new release.

Release: v0.84.3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[spdd] Daily spec work plan - 2026-08-01

3 participants