[self-care:open-source-failures] Restore live-mode target authority for AW Doctor workflows

The bounded seven-day snapshot shows 13 repeated live-mode pre-activation failures in `githubnext/gh-aw-cao` across AW Doctor workflows because target authority for live mode is missing or invalid. This blocks routine doctor automation before agent work starts.

**Action:** Repository maintainer should restore a valid `.github/workflows/cao.json` target-authority declaration for the affected packages on the default branch; accept when new runs of the listed workflows pass CAO control precompute in live mode.

The strongest evidence is repeated `Run CAO control precompute` failures with the same message: `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode`. Two nearby runs also report an invalid authority schema for `aw-doctor`, which is consistent with a recently removed or malformed authority record rather than an unrelated runtime defect.

Agent prompt
Update `githubnext/gh-aw-cao` so live-mode AW Doctor workflows have a valid target authority on the default branch. Inspect `.github/workflows/cao.json`, restore or correct the `version: 1` structure and `target-authority.packages.aw-doctor.authority` entry, validate the JSON, and confirm the affected workflows can pass CAO control precompute in live mode without changing rollout scope.

Representative runs

- `githubnext/gh-aw-cao` `AW Doctor / Failures`: https://github.com/githubnext/gh-aw-cao/actions/runs/33913096610
- `githubnext/gh-aw-cao` `AW Doctor / Upgrade`: https://github.com/githubnext/gh-aw-cao/actions/runs/33913055484
- `githubnext/gh-aw-cao` `AW Doctor / Compiler Security`: https://github.com/githubnext/gh-aw-cao/actions/runs/33913088645

Bounded evidence

- Snapshot generated: 2026-09-04T19:58:53.598Z
- Evidence window: 168 hours
- Repeated across 3 workflows in the bounded snapshot
- Evidenced run count for this cluster: 13
- Confidence: high
- Probable cause: missing or malformed target-authority configuration for live mode in `.github/workflows/cao.json`

### Control Plane
- Correlation ID: 33916506448-180
- Central repository: githubnext/gh-aw-cao
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33916506448

> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33916779396) · pi · gpt54 · 27.7 AIC · ⌖ 8.48 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 18, 2026, 8:39 PM UTC

Start with .github/workflows/cao.json and inspect its version: 1 structure and target-authority.packages.aw-doctor.authority entry. Validate the JSON, then review the AW Doctor Failures, Upgrade, and Compiler Security workflows. Done means their live-mode CAO control precompute passes without changing rollout scope.

Written by the indexing model from the issue text.