[agent-suggestions] Auto-escalate recurring downstream-health failures into deduplicated action issues

[github-actions]

The internal-downstream-health workflow currently posts daily report issues, but recurring downstream failures are not converted into durable, deduplicated follow-up work items.

Evidence

• Discovery query for downstream workflow usage was rate-limited (github-search_code returned HTTP 429 for: org:elastic "elastic/ai-github-actions/.github/workflows/gh-aw-" language:yaml).
• Fallback evidence from approved data in this repo:
  • Open report issue #1195 documents repeated failures and suggested actions, including:
    • repeated gemini engine termination in elastic/ai-github-actions-playground
    • copilot auth failure (No authentication information found)
    • agent-suggestions parse_error in elastic/oblt-aw
• Duplicate checks:
  • /tmp/previous-findings.json only contains closed periodic [agent-suggestions] records, no matching escalation item.
  • Issue search for downstream-health + follow-up/dedup/recurring found no existing tracker issue.

Gap

Downstream health findings are visible, but not automatically tracked to closure. Repeated incidents can reappear in daily reports without a single canonical issue to own remediation.

Proposal

Add escalation logic to downstream-health that:

1. fingerprints findings by (repo, workflow, normalized error signature)
2. creates/updates one canonical tracking issue per fingerprint
3. links each daily report finding to the canonical issue
4. suppresses duplicate issue creation within a cooldown window

Acceptance criteria

• Re-running downstream-health with the same failure signature updates an existing issue instead of creating a new one.
• Daily report includes links to canonical tracking issues.
• New signatures still create fresh issues automatically.
• Escalation behavior is covered by at least one workflow-level test fixture/sample run output.

Note

🔒 Integrity filter blocked 144 items

The following items were blocked because they don't meet the GitHub integrity level.

• #1128 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #1175 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #1175 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #1067 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #700 search_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #1025 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #248 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #704 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #336 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #139 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #694 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #875 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #321 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #245 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #359 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #235 search_issues: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• ... and 128 more items

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

---

What is this? | From workflow: Trigger Agent Suggestions

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

• expires on Jun 8, 2026, 2:59 PM UTC

[github-actions]

This issue was automatically closed because it expired on 2026-06-08T14:59:18.596Z.

Closed by Workflow