🩺 CI-health: estate failure-class report

[hyperpolymath]

🩺 CI-health: estate failure-class report

Generated 2026-08-14T04:53Z · owner: hyperpolymath · dry_run: false · scanned 392 repos

🔴 A-BILLING — OWNER action required (account spending-limit/payment wall)

• none

🟠 B — allow-list / startup_failure

• .github (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• Axiom.jl (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• Cliodynamics.jl (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• Cliometrics.jl (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• Skein.jl (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• a2mliser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• absolute-zero (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• accessibility-everywhere (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• action-trust-layers (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• affinescript (B-STARTUPFAIL): 15 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• affinescriptiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• aggregate-library (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• airborne-submarine-squadron (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• alloyiser (B-STARTUPFAIL): 24 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ambientops (B-STARTUPFAIL): 25 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• anamnesis (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• anvomidav (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• anvomidaviser (B-STARTUPFAIL): 19 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• anytype (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• arghda-core (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• asdf-tool-plugins (B-STARTUPFAIL): 23 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• aspasia (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• atsiser (B-STARTUPFAIL): 20 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• awesome-idris2 (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• awesome-nickel (B-STARTUPFAIL): 26 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bebop-ffi (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• betlang (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• betlangiser (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bgp-backbone-lab (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bitfuckit (B-STARTUPFAIL): 12 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• blocky-writer (B-STARTUPFAIL): 24 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• blue-screen-of-app (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bofig (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• boinc-boinc (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• boj-server (B-STARTUPFAIL): 26 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• boj-server-cartridges (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bqniser (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• bunsenite (B-STARTUPFAIL): 29 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cafescripto (B-STARTUPFAIL): 15 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• candy-crash (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• casket-ssg (B-STARTUPFAIL): 29 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• chapeliser (B-STARTUPFAIL): 20 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• checky-monkey (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• chimichanga (B-STARTUPFAIL): 21 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cicd-squabbler (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• claude-integrations (B-STARTUPFAIL): 21 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cloud-sync-tuner (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cloudflare-dns-terraform (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cloudguard-cli (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cloudguard-server (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• conative-gating (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• conflow (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• continuation-mesh (B-STARTUPFAIL): 23 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• contractiles (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• cookie-rebound (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• coord-tui (B-STARTUPFAIL): 28 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• coq-jr (B-STARTUPFAIL): 21 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• defiant (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• docudactyl (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• double-track-browser (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• echidna (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• echo-types (B-STARTUPFAIL): 24 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• eclexia (B-STARTUPFAIL): 18 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• eclexiaiser (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• empty-linter (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ephapax (B-STARTUPFAIL): 27 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• epistemic-types (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• excel-economic-numbers-tool (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• feedback-o-tron (B-STARTUPFAIL): 11 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• filesoup (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• first-post (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• flat-mate (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• frayed-knot-toolkit (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• fraying-model-computational-testbed (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• git-scripts (B-STARTUPFAIL): 30 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• gitbot-fleet (B-STARTUPFAIL): 10 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• glyphbase (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• gnpl (B-STARTUPFAIL): 16 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• haec (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• halideiser (B-STARTUPFAIL): 21 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• hermeneia (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• hesiod-dns-map (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• heterogenous-mobile-computing (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• http-capability-gateway (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• hybrid-automation-router (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• hypatia (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• idrisiser (B-STARTUPFAIL): 30 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• invariant-path (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ipfs-overlay (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ipv6-tools (B-STARTUPFAIL): 18 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• iseriser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• januskey (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• jtv-lang (B-STARTUPFAIL): 20 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• julia-professional-registry (B-STARTUPFAIL): 26 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• julianiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• kaldor-iiot (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• kea (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• kitchenspeak (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• knot-rider (B-STARTUPFAIL): 13 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• laniakea (B-STARTUPFAIL): 18 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• lfs-shared (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• lithoglyph (B-STARTUPFAIL): 30 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• llm-grace (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• lucidscript (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• lustreiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• maa-framework (B-STARTUPFAIL): 19 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• manifesto (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• marches (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• methodologies (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• my-lang (B-STARTUPFAIL): 13 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• mylangiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• oblibeniser (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• odds-and-sods-package-manager (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• oikosbot (B-STARTUPFAIL): 15 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• otpiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• panic-attack (B-STARTUPFAIL): 20 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• panoply (B-STARTUPFAIL): 12 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• patallm-gallery (B-STARTUPFAIL): 26 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• polyglot-formalisms-elixir (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• polyglot-formalisms-gleam (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• polyglot-i18n (B-STARTUPFAIL): 11 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• polysafe-gitfixer (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ponyiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• presswerk (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• protocol-squisher (B-STARTUPFAIL): 18 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• proven (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• proven-servers (B-STARTUPFAIL): 18 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• proven-tests-and-benches (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• quandledb (B-STARTUPFAIL): 9 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• qubes-sdp (B-STARTUPFAIL): 15 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• raze-tui (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• reasonably-good-token-vault (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• recon-silly-ation (B-STARTUPFAIL): 11 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• reposystem (B-STARTUPFAIL): 3 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• robodog-defensive-systems-lab (B-STARTUPFAIL): 12 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• robot-vacuum-cleaner (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• rpa-elysium (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• rrecord-verity (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• rsr-julia-library-template-repo (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• rsr-template-repo (B-STARTUPFAIL): 10 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• scaffoldia (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• scm2a2ml (B-STARTUPFAIL): 21 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• scripts (B-STARTUPFAIL): 12 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• seamstress (B-STARTUPFAIL): 25 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• self-destructing-git-garbage (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• social-media-tools (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• somethings-fishy (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ssg-collection (B-STARTUPFAIL): 10 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• standards (B-STARTUPFAIL): 1 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• stateful-artefacts (B-STARTUPFAIL): 17 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• statistikles (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• systemet (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• technical-notes (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• the-metadatastician (B-STARTUPFAIL): 28 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• this-ssg (B-STARTUPFAIL): 30 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• tlaiser (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• tree-sitter-k9 (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• trigger (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• trope-checker (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• trope-particularity-workbench (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• tropical-types (B-STARTUPFAIL): 4 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• typell (B-STARTUPFAIL): 5 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• ubicity (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• universal-chat-extractor (B-STARTUPFAIL): 27 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• universal-project-manager (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• vcs-ircd (B-STARTUPFAIL): 6 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• verisimdb (B-STARTUPFAIL): 8 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• verisimdb-data (B-STARTUPFAIL): 14 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• vocarium (B-STARTUPFAIL): 30 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• voyage-enterprise-decision-system (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• zerostep (B-STARTUPFAIL): 2 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns
• zotero-tools (B-STARTUPFAIL): 7 recent startup_failure run(s) → web-UI banner names the blocked action; populate allow-list patterns

🟡 D-BURN — push/PR double-trigger

• 007-lang: ERR-WF-014: .github/workflows/guix-nix-policy.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• 007-lang: ERR-WF-014: .github/workflows/k9-svc-validation.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• email-octad-experiment: ERR-WF-014: .github/workflows/guix-nix-policy.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• email-octad-experiment: ERR-WF-014: .github/workflows/npm-bun-blocker.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• email-octad-experiment: ERR-WF-014: .github/workflows/quality.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• email-octad-experiment: ERR-WF-014: .github/workflows/security-policy.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel
• email-octad-experiment: ERR-WF-014: .github/workflows/ts-blocker.yml on bare [push,pull_request] (2x runs/PR) → scope push to default branch + concurrency-cancel

Auto-remediation: B-ALLOWLIST applied in place; D-BURN opened as PRs (cap 15/run); A-BILLING is owner-only. See scripts/ci-health/README.adoc.