[deep-report] Fix Schema Feature Coverage Checker: add network.allowed to Codex workflow frontmatter

[github-actions]

Description

The Schema Feature Coverage Checker workflow (schema-feature-coverage-checker) is a Codex-engine workflow with no network.allowed block in its frontmatter. As a result, the firewall blocks 100% of outbound network requests (43/43 blocked on most recent run). The workflow fails completely because it cannot reach api.githubcopilot.com, api.github.com, github.com, json-schema.org, or json.schemastore.org. The same pattern affects the AI Moderator workflow.

Root cause confirmed in Workflow Analysis report: §24022436614.

Expected Impact

Immediately resolves the 100% failure rate for Schema Feature Coverage Checker and AI Moderator. The fix is 5–8 lines of YAML frontmatter. Zero regressions expected since this is purely additive configuration.

Suggested Fix

Add a network block to the workflow's .github/workflows/schema-feature-coverage-checker.md frontmatter:

network:
  allowed:
    - api.githubcopilot.com
    - api.github.com
    - github.com
    - json-schema.org
    - json.schemastore.org

Apply the same fix to ai-moderator.md. After editing, recompile both workflows with gh aw compile.

Suggested Agent

Any agent with workflow-editing capability (e.g., Copilot coding agent or Claude).

Estimated Effort

Fast (< 30 min) — edit 2 files, recompile.

Data Source

DeepReport Intelligence Briefing — 2026-04-06 | Workflow Analysis #24847 | Daily Firewall Report #24875

Generated by DeepReport - Intelligence Gathering Agent · ● 291.4K · ◷

• expires on Apr 8, 2026, 3:02 PM UTC

[github-actions]

🍪 Issue Monster has assigned this to Copilot!

I've identified this issue as a good candidate for automated resolution and assigned it to the Copilot coding agent.

The Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · ● 188.4K · ◷