[audit-workflows] Daily Audit — 2026-04-03

[github-actions[bot]]

Summary

Audit of agentic workflow runs from the last 24 hours (as of 2026-04-03 ~21:00 UTC). 30 runs were analyzed across the repository — 21 skipped (trigger conditions not met), 3 agent runs succeeded, and 6 failed due to a single shared root cause: GitHub API rate limiting.

Metric	Value
Total runs (24h)	30
Active agent runs	4 (3 completed, 1 in-progress)
Failures	6
Errors	6
Missing tools	0
MCP failures	0
Total tokens	~5.96M
Total cost (est.)	$2.996

---

⚠️ Critical Issue: GitHub API Rate Limiting

6 workflow runs failed between 20:12–20:18 UTC due to a burst of concurrent activity exhausting the GitHub App installation rate limit.

Affected workflows:

• AI Moderator — 5 failures (lock issue and rate limit check steps)
• Issue Monster — 1 failure (fetch check runs step)

All errors share the same message pattern:

API rate limit exceeded for installation.

A surge of 3 consecutive pushes triggered all reactive workflows simultaneously, saturating the installation quota within ~6 minutes. Once the burst passed, AI Moderator ran successfully again.

Recommendation: Add exponential backoff or retry logic to pre_activation steps. Stagger scheduled trigger timing to avoid concurrent activation storms. Consider a shared rate-limit awareness layer in the harness.

---

✅ Successful Agent Runs

View agent run details

Workflow	Agent	Duration	Tokens	Cost	Turns
Daily Workflow Updater	copilot	6.1m	386,594	—	10
Daily Documentation Updater	claude	9.6m	2,727,800	$1.32	52
Sergo - Serena Go Expert	claude	13.5m	2,848,575	$1.68	65
Copilot CLI Deep Research Agent	copilot	in-progress	—	—	—

Total effective tokens: ~1.29M
Total estimated cost: ~$3.00

Sergo (Go code review) and Daily Docs Updater were the highest-cost runs, each consuming ~2.8M tokens and running 52–65 turns. Both completed successfully.

---

📊 Tool Usage (Top Tools)

View tool usage breakdown

Tool	Calls	Runs
Read	15	2
TodoWrite	6	1
Edit	6	1
github_pull_request_read	3	1
serena_activate_project	3	1
serena_search_for_pattern	3	1
safeoutputs_create_discussion	1	1

No missing tools or MCP server failures detected.

---

Recommendations

1. Rate limit resilience — Add retry/backoff to pre_activation steps for workflows that call GitHub APIs on activation. The harness could expose a shared rate-limit header reader to prevent cascading failures during push bursts.
2. Cost monitoring — Sergo and Daily Docs Updater each cost ~$1.30–1.68 per run. Monitor for cost regression if run frequency increases.
3. Parallel trigger mitigation — The 20:12–20:18 UTC burst suggests multiple concurrent PR/push events. Consider concurrency groups or skip-if-check-failing guards to serialize activation.

---

References:

• §23960764746 — AI Moderator failure (rate limit)
• §23960704386 — Issue Monster failure (rate limit)
• §23960763553 — Sergo successful run

Generated by Agentic Workflow Audit Agent · ● 319.1K · ◷

• expires on Apr 4, 2026, 9:23 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Agentic Workflow Audit Agent.

A newer discussion is available at Discussion #24584.