[instructions] Document threat-detection report-as-issue field

[github-actions]

Summary

Instructions janitor audit for .github/aw/. Latest stable release is v0.88.7 (already synced by prior PRs #60231/#60603/#60800), so this run audited the gap since the most recent instructions-sync commit (12f29c3, 2026-09-14) instead of re-diffing the stale release tag.

• .github/aw/*.md had no content changes since the last sync (only version-pin/lockfile commits: Refresh CLI defaults and scanner image pins #61432, [actions] Update GitHub Actions versions - 2026-09-16 #61303).
• docs/ had ~20 commits in the window. Of those, PR Allow opting out of "[aw] Detection Runs" tracking issue independently of threat detection #61428 ("Allow opting out of [aw] Detection Runs tracking issue independently of threat detection") added a new schema field, safe-outputs.threat-detection.report-as-issue, that was missing from our runtime reference.

Change

• .github/aw/safe-outputs-runtime.md: added the report-as-issue: sub-field to the documented threat-detection: fields list, matching pkg/parser/schemas/main_workflow_schema.json and docs/src/content/docs/reference/threat-detection.md.

Audits performed

• Release/change audit: reviewed commits touching docs/ and .github/aw/ since the last sync commit (2026-09-14) via the GitHub API (local clone is shallow, 1 commit).
• Size audit: wc -l .github/aw/*.md — all files remain under their target limits (largest: token-optimization.md at 384, syntax-agentic.md at 391, both < 400; safe-outputs-runtime.md is 311 after this change).
• Duplication audit: the new field is documented once, in the runtime reference; the index (safe-outputs.md) and the compact summary line in syntax-agentic.md intentionally don't enumerate threat-detection sub-fields, so no duplicate copy was introduced.
• Accuracy audit: cross-checked pkg/parser/schemas/main_workflow_schema.json for the new field's exact type/default/description; no other stale references found (checked for removed CLI aliases/metrics from Remove logs cached-logs alias #60933 and Remove legacy Effective Tokens metric #60997 — none referenced in .github/aw/).

Before/after line counts

File	Before	After
.github/aw/safe-outputs-runtime.md	310	311

All edited files are under their target limits.

🤖 Generated with [Claude Code]((claude.com/redacted)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by 🧹 Instructions Janitor · claude · sonnet50 · 209.4 AIC · ⌖ 32.8 AIC · ⊞ 7.4K · ◷

• expires on Sep 19, 2026, 12:47 AM UTC-08:00

---

Run: https://github.com/github/gh-aw/actions/runs/35201512779

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 18.1 AIC · ⊞ 9.1K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot please review the latest state of this PR, refresh from the updated branch if needed, and run the pr-finisher skill before handing back to maintainers.

• Please update the branch from the base branch if GitHub allows it.
• Then run the pr-finisher skill and report any blockers for maintainers.

Run: https://github.com/github/gh-aw/actions/runs/35201512779

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 18.1 AIC · ⊞ 9.1K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please review the latest state of this PR, refresh from the updated branch if needed, and run the pr-finisher skill before handing back to maintainers.

• Please update the branch from the ...

Branch is already up to date with main (base sha c054206 == merge-base, 0 commits behind). No unresolved review threads exist. Ran local validation (make agent-report-progress-no-test) — build, action-pin sync, schema freshness all pass; no workflow/schema files were touched by this doc-only change. No fixes were needed, so no new commits were pushed.

Summary:

• ✅ Reviews — no open review threads
• ✅ Checks (local) — build/lint/schema checks pass locally
• ❓ Checks (CI) — only the currently-running copilot check is present; no prior CI run to root-cause
• ✅ Mergeable — branch up to date with main, no conflicts

Ready for a maintainer to merge once CI completes.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.89.17