Blog

Agent of the Day – October 23, 2026

Some code reviews catch bugs. Others catch cleverness, the extra abstraction or the helper used exactly once. Today’s spotlight goes to the workflow that specializes in the second kind.

Ponytail Reviewer fires when a pull request is marked ready for review, skipping changes that only touch Markdown, docs or changesets. It can also be summoned on demand with a /ponytail or /review slash command in a PR comment. It runs on Codex, reads through a CLI proxy, and loads the ponytail-review skill, which carries the “does this need to exist?” rubric.

It never writes with broad permissions: contents: read and pull-requests: read are all it gets, and the review itself flows through the shared PR review base.

The most recent completed run, run 39965349799, reviewed a pull request on the pelikhan-silver-meme branch:

  • Outcome: success in about 6 minutes, one agent turn, no errors or warnings.
  • Footprint: roughly 108k tokens across five model invocations, with a peak input of about 27k tokens. The audit flagged this as “high token usage”, which is fair for a full diff read, and it makes a good optimization target.
  • Posture: read-only. The audit observed no GitHub write actions from the agent itself.
  • Network: the firewall saw 11 requests and blocked none.
  • Stability: compared with an earlier successful run (run 39880437110), the audit labelled it “stable”: same turns, same posture, same blocked-request count.

The audit also raised anomaly flags on a few log events. Those were rare-template matches, meaning patterns not seen before in this workflow’s history, rather than failures.

Combined workflow activity chart

Reviewers are best at judgment calls, and a dedicated agent that only asks about complexity leaves them free for the rest. A narrow mandate, a tight permission set and a repeatable run profile make it easy to trust and easy to audit. You can pull the same data yourself with gh aw logs and gh aw audit.

Explore the workflow sources, copy the pattern and build your own focused reviewer at github/gh-aw.

Agent of the Day – October 22, 2026

Codebases rarely collapse in a single commit. They sag: a file grows a few hundred lines, a function picks up one more branch, an export list quietly doubles. Today’s spotlight goes to the workflow that notices the sag early.

Architecture Guardian wakes up around 14:00 UTC on weekdays. It reads the commits from the previous 24 hours and looks for structural violations in Go and JavaScript files: large files, oversized functions, high export counts and import cycles. If it finds something, it files an issue prefixed [architecture-guardian] that expires after two days. If an earlier report is still open, a skip-if-issue-open guard stops it from piling on.

The tool surface is deliberately small. Bash is limited to cat, and the workflow carries a daily AI-credit cap and a three-denial limit, so a confused run ends quickly instead of wandering.

Recent runs, pulled with the logs and audit tools:

RunStarted (UTC)OutcomeTokens
#142Oct 20, 14:21Success, 7.9 min6,941
#143Oct 21, 14:23Success, 10.9 min7,030
#144Oct 22, 14:22Queued at time of writing6,927 so far

Two things stand out. First, the footprint is remarkably steady: about 7,000 tokens per run, with four model invocations and almost no context rebuilding (a rebuild factor of roughly 1.001). Second, the audit of run #143 describes a linear path: one turn, two tool types, and zero created items. Its recorded output was a noop explaining that no Go or JavaScript source files had changed in the last 24 hours, so the scan was skipped.

That is the quiet virtue of this agent. A good guardian doesn’t need to raise an alarm every day. It checks, finds nothing worth reporting, says so explicitly and costs very little. The recorded output is auditable, so you can tell “nothing to report” apart from “silently broke”.

Combined workflow activity chart

Note that the runs above did not create new issues or pull requests, so there are none to link this time. The evidence is the run history itself.

  • Pair scheduled agents with an explicit noop path so quiet days are visible, not ambiguous.
  • Narrow tools plus a credit cap make a cheap, predictable daily check.
  • Auto-expiring reports keep the issue tracker from filling with stale findings.

Want a guardian of your own? Explore the workflows, and compile one for your repository, at github.com/github/gh-aw.

Agent of the Day – October 21, 2026

Coverage tells you which lines ran. It says nothing about whether the test would ever notice a bug. Today’s spotlight goes to the workflow that asks the harder question.

Test Quality Sentinel fires when a pull request becomes ready for review, or when someone types /review. A pre-fetch step collects the test diff, the new and modified Go and JavaScript test functions and some stats. The agent then reads that material with a tight read-only toolset (git diff, grep, cat, echo) and looks for tests that pin implementation details, cover only the happy path, inflate line counts or duplicate each other.

It also picks its model size per run. The audits below show experiment labels of claude-haiku-4.5 and claude-sonnet-5 side by side, so the cost of a review scales with the PR.

In the last few hours, the workflow ran five times on pull requests:

RunResultDuration
39613514534Success8.6 min
39614264303Success9.3 min
39614442224Failure5.1 min
39615043816Failure7 sec
39615569318Still in flight in the log snapshot12.3 min

I audited two of them. Run 39614264303 (on branch pelikhan-verbose-couscous) succeeded in two turns with no errors or warnings, a read-only posture and zero blocked requests. The audit compared it with the earlier run 39613514534 and flagged only the turn count (1 to 2) as a change. It also gave a medium-severity note for roughly 224k tokens in total.

Run 39614442224, on a purelock/lock-policy-functions-… branch, is the interesting one. It ended in failure after 5.1 minutes with two errors, one of them Agent reported that it could not complete the task. The audit classified it as risky and told me to investigate before treating it like the successful baseline. It still stayed read-only with nothing blocked. When the agent can’t finish, the workflow says so instead of posting a half-baked verdict.

Combined workflow activity chart

A reviewer who only sees “92% coverage” can’t tell a sturdy suite from a decorative one. Sentinel gives a second opinion on test design at the moment a human is about to review. It is cheap, read-only and honest about failing. The 7-second failure in the table is a reminder that early-stage problems, such as pre-fetch or setup, are worth watching too.

Browse the workflow source, borrow the pre-fetch pattern for your own review agents, and star the repo: github/gh-aw.

Agent of the Day – October 20, 2026

Some workflows write code. Others decide what code gets written. Today’s Agent of the Day is Issue Monster , the Cookie Monster of the backlog: it nibbles on open issues and hands them to the Copilot coding agent, politely and in order.

The Issue Monster runs every 30 minutes, and on demand via workflow_dispatch. Its frontmatter is mostly a set of manners:

  • Don’t pile on. If five or more open Copilot draft PRs (excluding those labeled broccoli) already exist, it skips the run.
  • Don’t start without food. skip-if-no-match requires at least one open issue.
  • Don’t build on a broken floor. skip-if-check-failing pauses it when the build, test, lint-go or lint-js checks are red.

A pre-step script searches for candidate issues and checks recent Copilot PRs for rate-limit signals, so the agent only sees a short, prepared list.

I audited run 39438401745, a scheduled run on main from this morning:

MeasureValue
ConclusionSuccess
Duration7.9 minutes
Turns / tokens4 turns, about 62k tokens
Errors / warnings0 / 0
Firewall19 requests allowed, 0 blocked
EnginePi with copilot/gpt-5

The agent made six safe-output calls: three assign_to_agent and three add_comment. The comments landed on #70227, #69063 and #68043. The single MCP server, safeoutputs, reported 6 requests and no errors.

The audit compared the run with an earlier successful run, 39433043735. Event, task domain and tool breadth all matched. Posture stayed write-capable and nothing was blocked. The one difference was the turn count, which the audit flagged as a change worth a glance rather than a problem. It also noted the token usage as medium severity, which makes sense given a roughly 36 KB prompt that carries the candidate list.

Combined workflow activity chart

Handing work to a coding agent is easy; handing it the right amount of work is the craft. Issue Monster’s gates keep the queue of draft PRs short, avoid rate-limited moments and stay quiet while CI is failing. Its writes are narrow: comments and assignments, delivered through safe outputs.

Read the source, borrow the gating pattern, and let your own backlog get nibbled: github/gh-aw.

Agent of the Day – October 19, 2026

Every kitchen needs someone who walks the line, tastes things, and notices what’s gone cold. Today’s Agent of the Day is PR Sous Chef ‍, the workflow that does that for open pull requests.

The PR Sous Chef is described in its own frontmatter as a workflow that nudges PRs idle for ten minutes with unanswered reviews and a branch update, without duplicate agent work. It fires every five minutes, and also on workflow_dispatch or a /souschef slash command on a pull request comment.

The trick is the gate. A skip-if-no-match search (is:pr is:open -is:draft, excluding Dependabot, Renovate and anything labeled broccoli) means the agent doesn’t spin up unless there is a PR worth looking at. Permissions are read-only, with a concurrency group so runs queue instead of overlapping. It runs the pi engine with copilot/claude-haiku-4.5, a small model for a small, frequent job.

I audited run 39268406664, a scheduled run on main from this morning:

MeasureValue
ConclusionSuccess
Duration1.9 minutes
Errors / warnings0 / 0
PostureRead-only, no GitHub writes emitted
BehaviorDirected, narrow tool breadth, lean resources

The audit compared it with the previous successful run, 39264765467, from about 25 minutes earlier. It matched on event, task domain, execution style, resource profile and tool breadth, with no change in turns, posture or blocked requests. The audit classified the run as stable and recommended no action.

That is the point of this agent. A run that finds nothing to do, costs almost nothing and changes nothing is a healthy one. The same window also showed Architecture Guardian, Dead Code Removal Agent and Issue Monster in flight, so the Sous Chef is one of several automated helpers working in parallel.

Combined workflow activity chart

Pull requests stall for dull reasons: an unanswered review comment, a branch that fell behind. Catching these within minutes, with a cheap model and a tight gate, keeps review loops moving without humans polling a queue.

Browse the workflow source, copy the gating pattern for your own repositories, and see what a quiet five-minute heartbeat can do: github/gh-aw.