Smoke AllowOnly: 24889825169

[github-actions]

AllowOnly Guard Smoke Test Results

Policy: repos=["github/gh-aw*"], min-integrity=approved
Run: https://github.com/github/gh-aw-mcpg/actions/runs/24889825169

In-Scope Access (github/gh-aw*)

Tool	Target	Result	Status
list_issues	gh-aw-mcpg	3 issues returned	✅
list_pull_requests	gh-aw-mcpg	3 PRs returned	✅
list_commits	gh-aw-mcpg	3 commits returned	✅
get_file_contents	gh-aw-mcpg	README.md content returned	✅
list_branches	gh-aw-mcpg	5 branches returned	✅
search_code	gh-aw-mcpg	40 results returned	✅
list_issues	gh-aw	Accessible; 3 items integrity-filtered (below "approved")	✅
get_file_contents	gh-aw	Accessible; filtered by integrity (metadata below "unapproved")	✅

Out-of-Scope Access (octocat/Hello-World)

Tool	Result	Status
list_issues	All items filtered by integrity policy (non-member authors)	✅
list_pull_requests	All items filtered by integrity policy	✅
list_commits	All items filtered by integrity policy	✅
get_file_contents	Filtered by integrity policy	✅
search_code	Filtered by integrity policy	✅

Global APIs

Tool	Result	Status
search_repositories	All results filtered by integrity policy	✅
search_users	Tool not available in this environment	N/A

Integrity Filtering

Observation	Status
gh-aw issues: 3 items filtered — authors lack OWNER/MEMBER/COLLABORATOR association (below "approved")	✅
octocat/Hello-World all content filtered — external repo content has no org membership integrity	✅
gh-aw-mcpg issues: all visible items passed (bot/automation PRs treated as approved)	✅

Summary

• In-Scope Access: 8/8 ✅
• Out-of-Scope Blocked: 5/5 ✅
• Global APIs Blocked: 1/1 ✅ (search_users N/A)
• Integrity Filtering: ✅
• Overall: PASS

Note

🔒 Integrity filter blocked 17 items

The following items were blocked because they don't meet the GitHub integrity level.

• [aw] GitHub MCP Structural Analysis failed gh-aw#28263 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• 🔍 Multi-Device Docs Testing Report - 2026-04-24 gh-aw#28261 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• Workflow Health Dashboard — 2026-04-24 gh-aw#28258 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• get_file_contents get_file_contents: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@7fd1a60 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@7629413 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• octocat/Hello-World@553c207 list_commits: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• search_code search_code: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• Test Issue 1777004091 octocat/Hello-World#9374 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• 🚨 New article published 😫 octocat/Hello-World#9373 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• Unexpected null pointer exception in authentication module octocat/Hello-World#9370 list_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/guardian/guardian.github.com search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/oreoshake/guard-brakeman search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• https://github.com/johnbintz/guard-rails search_repositories: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• #9372 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• #9371 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "unapproved".
• ... and 1 more item

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

🛡️ AllowOnly guard smoke test by Smoke AllowOnly

• expires on Apr 24, 2026, 2:39 PM UTC