[uk ai resilience] [uk-ai-resilience] Recent-changes governance report 2026-09-29

[github-actions[bot]]

Executive summary

Window: 7 days (since 2026-09-22), 134 commits, 53 security-signal commits, 68 open security issues, 277 open code-scanning alerts, 0 secret-scanning alerts. Analysis was done directly from the pre-computed data; sub-agents were not dispatched. Findings therefore carry medium confidence. Most risk is already tracked by open [uk-ai-resilience] issues, so no new issues were created (duplicate avoidance).

Asset graph summary

• CI/workflow surface: 244 npm install and 10 uv pip install non-determinism alerts, plus 1 pip inline, 1 setup-node version and 1 Dockerfile unpinned-image alert.
• Go compiler/CLI (pkg/cli, pkg/workflow): 9 go/allocation-size-overflow, 5 go/bad-redirect-check, 1 useless-assignment.
• JS scripts: 1 js/http-to-file-access; 2 GraphQL sprintf-injection warnings.

Tier classification

Area	Tier	Tracking
Actions dependency installs (256 alerts)	B	existing uk-ai-resilience issue
Go allocation-size-overflow (create_code_scanning_alert.go, mcp_github_config.go, experiments_command.go)	C	existing issues
go/bad-redirect-check (github_app_requirements.go)	B	existing issue
ensure-docs-slide-pdf.js recurrence	C	existing issue
CODEOWNERS missing for compiler/CLI paths	B	existing issue
curl | sudo sh in sudo_docker_sbx_install.sh	B	existing setup-security issue

Control verification gaps

• Ownership: no CODEOWNERS for security-sensitive paths.
• Dependency: non-deterministic installs and unpinned images.
• SDLC: alerts recur ([Custom Engine Test] Test Pull Request - Custom Engine Safe Output #663), so the fix-verification loop is weak.
• Secrets: no open alerts (control effective).
• Recovery/observability: not independently verified this run.

Risk scoring rationale

Tier C areas have high exposure amplification (AI-assisted discovery of overflow and redirect patterns in public code) and moderate patchability. Tier B areas are highly patchable through pinning and lockfiles.

Remediation queue

Item	SLA
Pin/lock CI installs	high
Fix allocation-size overflows	high
Add CODEOWNERS	medium
Replace curl|sh install with a pinned checksum	medium
Close recurring alert #663	medium

Exception register

None.

Metrics baseline

• MTTR proxy: 277 open alerts, with 68 open security issues.
• Ownership coverage: low for compiler/CLI paths.
• Unsupported dependency ratio: not measured.
• Exception aging: n/a.
• Exposure without recovery capability: not measured.

Generated by UK AI Operational Resilience · copilot · auto · 14.4 AIC · ⌖ 14.5 AIC · ⊞ 7.8K · ◷

• expires on Oct 2, 2026, 7:44 AM UTC-08:00