fix: return gh-aw coverage controller to manual canary

[groupthinking]

Outcome

Contain the unsafe post-merge activation from #921 without disabling Jules or removing gh-aw.

Progresses #898 and focused issue #920.

Why this PR exists

PR #921 merged externally while its own description said Do not merge and its exact-head gh-aw validation was red. The failure was not an application failure: gh-aw v0.82.14 compiled all three workflows, then detected a nondeterministic lock change caused by the shorthand schedule: daily.

This is the single canonical post-merge correction for #920. It does not create a competing implementation.

Changes

• Remove the scheduled trigger from the Focused Coverage Controller.
• Keep workflow_dispatch so the real gh-aw canary remains installed and testable.
• State explicitly that Jules remains enabled as an implementation agent.
• Regenerate the lock file with pinned gh-aw v0.82.14.

Local exact-source verification

• gh aw compile focused-coverage-controller --validate --approve: 0 errors, 0 warnings.
• gh aw compile focused-coverage-controller --zizmor --poutine --approve: 0 errors, 0 warnings.
• git diff --check: passed.
• Local actionlint could not start because Docker is unavailable in the controller sandbox; the repository exact-head validation workflow remains authoritative.

Safety / activation

• Draft until exact-head GitHub checks complete.
• No agent was disabled.
• No merge, credential change, branch deletion, ruleset change, or production mutation is authorized by this PR.
• Re-enable a deterministic scheduled trigger only after Install pinned gh-aw canary and repair false-green coverage #920's truthful Coverage artifact and canary exit criteria are proven.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
v0-uvai	Canceled		Jul 22, 2026 4:32am

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

• [‘architecture-gap’, ‘bug’, ‘ci-cd’, ‘ci/cd’, ‘copilot-rabbit’, ‘documentation’, ‘duplicate’, ‘enhancement’, ‘frontend’, ‘github_actions’, ‘good first issue’, ‘help wanted’, ‘high-priority’, ‘invalid’, ‘javascript’, ‘ml-model’, ‘needs-triage’, ‘pipeline-critical’, ‘placeholder-code’, ‘priority:high’, ‘python’, ‘python:uv’, ‘question’, ‘styling’, ‘tests’, ‘v0’]

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Repository UI (inherited), Organization UI (inherited)

Review profile: ASSERTIVE

Plan: Pro

Run ID: 6d3e3dfb-49d3-4288-966c-fba7139ce688

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/gh-aw-postmerge-canary

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch fix/gh-aw-postmerge-canary

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA a34695f.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[github-actions]

Agent Completion Truth Gate: NOT_APPLICABLE

Evidence agrees.

Machine-readable verdict

{
  "details": {},
  "reasons": [],
  "verdict": "not_applicable"
}

Workflow evidence

[Copilot]

Pull request overview

Returns the coverage controller to a safe, manual-only canary.

Changes:

• Removes the scheduled trigger and regenerates the gh-aw lock.
• Clarifies Codex/Jules responsibilities.
• Prevents test-module import poisoning.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.github/workflows/focused-coverage-controller.md	Makes the controller manual-only.
.github/workflows/focused-coverage-controller.lock.yml	Regenerates the compiled workflow.
tests/test_skills_integration.py	Removes harmful module stubs and adds regression coverage.