[detection-stats] Detection stats for github/gh-aw - 2026-09-04

846 external-detector runs analysed, detection-job error rate 0%, soft failures 117, threat rate 0%.

## Summary

# gh-aw detection statistics - 2026-09-04 (UTC)

Repository: `github/gh-aw`
Window: `2026-09-04T00:00:00Z` .. `2026-09-04T23:59:59Z`
API requests: 2198, rate-limit pauses: 1
Data complete: yes

### Totals

| Metric | Count |
|---|---|
| Workflow runs in window | 2903 |
| Agentic runs (`*.lock.yml`) | 1529 |
| Runs with a `detection` job | 846 |
| ... using the external detector | 844 |
| ... using the built-in detector | 2 |
| ... detector could not be determined | 0 |
| Agentic runs without a `detection` job | 683 |

All rates below are over the **external detector** population (844 runs).

### Detection job outcomes

| Outcome | Count | Rate |
|---|---|---|
| `skipped` | 469 | 55.57% |
| `success` | 375 | 44.43% |

**Error rate (failure/timed_out/action_required): 0%**

### Verdict availability

| State | Meaning | Count |
|---|---|---|
| `present` | detection artifact downloaded and parsed | 238 |
| `absent` | detection job ran but published no artifact (soft failure) | 117 |
| `skipped` | detection job was skipped or was still running (nothing to fetch) | 469 |
| `unreadable` | artifact zip could not be unpacked | 20 |

Green detection jobs that published no verdict: **117**.

### Detection results

| Result | Count |
|---|---|
| Runs with a parsed verdict | 238 |
| Clean (no threat) | 238 |
| Any threat | 0 |
| `prompt_injection` | 0 |
| `secret_leak` | 0 |
| `malicious_patch` | 0 |

**Threat rate (of runs with a verdict): 0%**

_Full per-workflow and notable-run breakdowns are in the collected artifact; only headline numbers and the watch list are reproduced here to keep this report bounded._

## Change since 2026-09-03

| Metric | Previous (2026-09-03) | Today (2026-09-04) | Delta | 7-day mean |
|---|---|---|---|---|
| External detector runs | 745 | 844 | +99 | 799.9 |
| Error rate (%) | 0.0 | 0.0 | 0.0 | 0.0 |
| Soft failures | 72 | 117 | +45 | 63.9 |
| Runs with verdict | 294 | 238 | -56 | 264.7 |
| Any threat | 0 | 0 | 0 | 0.14 |
| Threat rate (%) | 0.0 | 0.0 | 0.0 | 0.05 |

## Watch list

- Issue Monster — 0 failed, 22 without a verdict, out of 47 runs
- Avenger — 0 failed, 11 without a verdict, out of 24 runs
- Ponytail Reviewer — 0 failed, 10 without a verdict, out of 13 runs
- Impeccable Skills Reviewer — 0 failed, 2 without a verdict, out of 13 runs
- Daily Go Test Parallelizer — 0 failed, 2 without a verdict, out of 12 runs

Collected by: https://github.com/github/gh-aw-threat-detection/actions/runs/33943182029
Full data: the detection-stats-33943182029 artifact on that run.

> Generated by [Detection Stats Daily](https://github.com/github/gh-aw-threat-detection/actions/runs/33943182029) · copilot · auto · 28.4 AIC · ⌖ 5.7 AIC · ⊞ 11.3K · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw-threat-detection+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-threat-detection%2Fdetection-stats-daily%22&type=issues)

This issue is an automatically generated daily report and names no source files, tests, or implementation entry point. Start by reviewing the linked Detection Stats Daily workflow run and its detection-stats artifact. No change or completion condition is specified, so the intended work must be clarified before implementation.

Written by the indexing model from the issue text.