[P1] Contribution Check: add_labels safe output fails with temporary_id reference

[github-actions]

Problem

The Contribution Check workflow (contribution-check) has been failing consistently since 2026-03-15 due to a safe outputs processing error. The agent generates an add_labels safe output call that uses a temporary_id (aw_report1) as the item_number, but the add_labels handler does not support temporary ID resolution.

Error Message

##[warning]Invalid item number: aw_report1
##[error]✗ Message 6 (add_labels) failed: Invalid item number: aw_report1
##[error]1 safe output(s) failed:
  - add_labels: Invalid item number: aw_report1

Failure Pattern

• Frequency: 15+ consecutive failures on 2026-03-15 (multiple runs/day)
• Last success: Run Network Permissions Feature Test Results - MCP Container Security Validation #164 on 2026-03-14
• Failure rate: 28/30 recent runs
• Failure step: safe_outputs job → "Process Safe Outputs" step

Root Cause

The Copilot agent produces this sequence of safe output calls:

1. create_issue with temporary_id: aw_report1 → creates issue (succeeds ✅)
2. add_labels with item_number: aw_report1 → fails because add_labels handler doesn't resolve temporary IDs ❌

The add_labels safe output handler resolves the temporary ID map only after all messages are processed, or the resolution mechanism is not implemented for add_labels. Other handlers (add_comment) do support temporary ID references.

Evidence

• Run §23104133000 — safe_outputs job #67110634450
• The create_issue (message 5) succeeds and registers aw_report1 → github/gh-aw#21029
• The add_labels (message 6) immediately fails: Invalid item number: aw_report1

Fix Options

Option 1 (Recommended — fix safe outputs handler): Implement temporary ID resolution in the add_labels handler, consistent with add_comment behavior.

Option 2 (Workaround — fix agent prompt): Update the Contribution Check workflow prompt to instruct the agent not to use temporary IDs in add_labels calls — instead, use the actual issue number once created.

Option 3 (Workaround — reorder calls): Move the add_labels call after the create_issue in the agent's output so that a reference can be made by absolute issue number. This isn't fully reliable since the agent's output order varies.

Impact

• Contribution Check workflow fails on every run where the agent creates a new issue report
• The agent itself runs successfully — the PR reviews and comments are made — but the workflow conclusion is failure
• Creates unnecessary noise in CI failure alerts

References

• Run: §23104133000
• Failing job: https://github.com/github/gh-aw/actions/runs/23104133000/job/67110634450
• Detected by: §23105821296 (Workflow Health Manager)

Related to #19352

Generated by Workflow Health Manager - Meta-Orchestrator · ◷

• expires on Mar 16, 2026, 7:36 AM UTC

[github-actions]

✅ Recovery Confirmed — 2026-03-16

The Contribution Check workflow has recovered. Confirmed 4 consecutive successful runs as of today:

Run	Time	Conclusion
#194	2026-03-16T05:39Z	✅ success
#193	2026-03-16T01:30Z	✅ success
#192	2026-03-15T21:09Z	✅ success
#191	2026-03-15T17:06Z	✅ success

The add_labels temporary ID resolution appears to have been fixed (or the agent is no longer producing the problematic call pattern). This issue can be closed.

Detected by §23132954416 (Workflow Health Manager)

Generated by Workflow Health Manager - Meta-Orchestrator · ◷

[github-actions]

This issue was automatically closed because it expired on 2026-03-16T07:36:45.999Z.

Closed by Workflow