[self-care:open-source-failures] Restore target authority for recurring live-mode pre-activation failures in githubnext/gh-aw-cao

Recurring live-mode pre-activation failures in `githubnext/gh-aw-cao` are blocking multiple workflows before they start useful work. In the bounded seven-day snapshot, 15 runs across AW Doctor and Dependabot workflows failed with the same high-confidence message: `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode`.

**Action:** the CAO control-plane maintainer should verify and fix the target authority configuration for `githubnext/gh-aw-cao`; accept when the cited workflows complete past `Run CAO control precompute` on their next scheduled or manual runs without this signature.

Critical findings:
- Affected workflows in the bounded snapshot: `AW Doctor / Failures`, `AW Doctor / Upgrade`, `AW Doctor / Compiler Security`, and `Dependabot / Release Trains`.
- Representative failing run: https://github.com/githubnext/gh-aw-cao/actions/runs/33961636624
- Evidence-supported cause: live mode is being denied during CAO control precompute because the target authority check reports missing `.github/workflows/cao.json` on the target default branch.
- Severity: P1 because the same actionable signature recurred in multiple runs.

Bounded evidence

Representative runs with the same signature:
- https://github.com/githubnext/gh-aw-cao/actions/runs/33961636624
- https://github.com/githubnext/gh-aw-cao/actions/runs/33961628215
- https://github.com/githubnext/gh-aw-cao/actions/runs/33961619481
- https://github.com/githubnext/gh-aw-cao/actions/runs/33960515313
- https://github.com/githubnext/gh-aw-cao/actions/runs/33958965076

Observed normalized signature: `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode`.

Probable cause is limited to what the evidence supports: either the target authority file is absent from the target default branch at runtime, or control precompute is resolving the target authority source incorrectly for these workflows. More invasive diagnosis needs repository inspection outside this bounded snapshot.

Agent prompt

Investigate why live-mode CAO precompute reports `Target authority missing: add .github/workflows/cao.json to the target default branch for live mode` for `githubnext/gh-aw-cao`. Check the target default branch contents and the control-precompute authority-resolution logic used by the affected workflows, make the smallest safe fix so the target authority is recognized, and validate by rerunning one AW Doctor workflow and one Dependabot / Release Trains workflow until both pass the `Run CAO control precompute` step.

### Control Plane
- Correlation ID: `33963310924-218`
- Central repository: `githubnext/gh-aw-cao`
- Control-plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33963310924

> Generated by [SelfCare / Open Source Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33963478221) · pi · gpt54 · 18 AIC · ⌖ 8.79 AIC · ⊞ 8.3K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Fself-care-open-source-failures%22&type=issues)
> - [x] expires on Sep 19, 2026, 11:35 AM UTC

Start by checking whether .github/workflows/cao.json exists on the target default branch, then inspect the control-precompute authority-resolution logic used by AW Doctor and Dependabot / Release Trains. Validate the smallest safe fix by rerunning one AW Doctor workflow and one Dependabot / Release Trains workflow; done means both pass the Run CAO control precompute step without the target-authority-missing signature.

Written by the indexing model from the issue text.