Add daily observability report workflow for AWF firewall and MCP Gateway logging coverage

[Copilot]

Daily agent workflow that audits workflow runs from the past week to verify observability coverage for debugging. Reports missing access.log (Squid proxy) or gateway.jsonl (MCP Gateway) as CRITICAL issues.

Workflow Configuration

• Runs on fuzzy daily schedule with 45-minute timeout
• Uses agentic-workflows MCP tool to download/analyze logs
• Creates discussion report with [observability] prefix, auto-closes older reports
• Read-only permissions; writes via safe outputs only

Analysis Coverage

• AWF Firewall: Checks access.log/ directory for Squid proxy logs
• MCP Gateway: Checks gateway.jsonl for structured tool execution logs
• Calculates coverage percentages and flags runs with missing/incomplete telemetry

Report Output

Creates a discussion with:

• Coverage summary table (firewall + gateway)
• Critical issues (missing logs)
• Detailed run-by-run analysis
• Actionable recommendations

# Example frontmatter
tools:
  github:
    toolsets: [default, discussions, actions]
  agentic-workflows: true
safe-outputs:
  create-discussion:
    expires: 7d
    title-prefix: "[observability] "
    close-older-discussions: true

Original prompt

Add a daily report agent for logging / observability coverage for the awf firewall and MCP Gateway. The agnet should try to pull as many workflow runs from the week as possible and analyze if they contain the necessary logs / telemetry in the firweall and the gateway to do debugging

One example of the logs from the firewall is the squid proxy logs (access.log). If this is missing, report it as critcal in the report.

output as a discussion for the report.

Custom agent used: agentic-workflows
GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.