chore: update model-to-API mapping (2026-09-12) by github-actions[bot] · Pull Request #8483 · github/gh-aw-firewall

github-actions · 2026-09-12T07:03:31Z

Summary

Checked the official OpenAI (developers.openai.com) and Anthropic (docs.anthropic.com) documentation for model/endpoint changes since the last update.

Changes

OpenAI: Added gpt-rosalind-research — a new life-sciences reasoning model (Trusted Access Program, approved organizations only). Confirmed via the model's docs page that it uses the same OpenAI SDK code templates (chat.completions.create / responses.create) as other restricted-access specialized models. Classified as Responses API only, consistent with the existing gpt-daybreak-* and gpt-5.6-cyber entries, since OpenAI's specialized/gated models are consistently responses-only in this mapping. Billing for this model begins October 5, 2026 per the OpenAI pricing page.
Anthropic: Verified the current Claude model catalog (claude-opus-5, claude-fable-5-1, claude-mythos-5-1, claude-sonnet-5, claude-haiku-4-5, claude-opus-4-1 through 4-8, claude-sonnet-4-5/4-6, and the 3.x legacy models) against docs.anthropic.com/en/docs/about-claude/models. No new families or removed models found — the existing glob patterns already cover all published model IDs.
Updated lastUpdated timestamp.

Verification

Validated the JSON with python3 -m json.tool.
No existing entries were removed or altered besides the timestamp.

Warning

Firewall blocked 4 domains

The following domains were blocked by the firewall during workflow execution:

api.github.com
github.com
pypi.org
raw.githubusercontent.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"
    - "github.com"
    - "pypi.org"
    - "raw.githubusercontent.com"

See Network Configuration for more information.

Generated by 🗺️ Model API Mapping Updater · copilot · auto · 98 AIC · ⌖ 10.4 AIC · ⊞ 8.3K · ◷

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot

🟡 Changes recommended

Add the new family to the appropriate Copilot catalog or explicit non-Copilot exclusion set.

Get a fresh assessment by requesting another Copilot review.

Pull request overview

Updates the model-to-API mapping with the new OpenAI Rosalind Research family.

Changes:

Adds gpt-rosalind-research* as Responses-only.
Refreshes lastUpdated.

The new family is missing from the Copilot catalog or explicit exclusion set, causing the mapping sync test to fail.

File summaries

File	Summary
`docs/model-api-mapping.json`	Adds the new OpenAI model mapping and timestamp.

Review details

Suppressed comments (1)

docs/model-api-mapping.json:38

This entry is added only to docs/model-api-mapping.json, but the Dockerfile copies containers/api-proxy/model-api-mapping.json into the image and model-api-mapping.js prefers that path over the docs fallback. That bundled file still has the 2026-09-04 timestamp and no gpt-rosalind-research entry, so deployed /reflect responses will omit this update. Update/regenerate the bundled copy (and its timestamp assertion) or change the build to package this source.

          "family": "gpt-rosalind-research",
          "patterns": ["gpt-rosalind-research*"],
          "endpoints": ["responses"],
          "notes": "Life sciences reasoning model, Trusted Access Program (approved organizations only). Responses API only, consistent with other restricted-access specialized models (gpt-daybreak-*, gpt-5.6-cyber). Billing begins October 5, 2026."

Files reviewed: 1/1 changed files
Comments generated: 1
Review effort level: Lite (auto)

Note

Copilot is running an experiment and ran this review at Lite.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

+          "family": "gpt-rosalind-research",
+          "patterns": ["gpt-rosalind-research*"],
+          "endpoints": ["responses"],
+          "notes": "Life sciences reasoning model, Trusted Access Program (approved organizations only). Responses API only, consistent with other restricted-access specialized models (gpt-daybreak-*, gpt-5.6-cyber). Billing begins October 5, 2026."


lpcox · 2026-09-12T17:14:49Z

@copilot address review feedback

Copilot · 2026-09-12T17:17:20Z

@copilot address review feedback

Addressed in 9e2f443 by adding gpt-rosalind-research to the explicit non-Copilot mapping exclusion with a rationale. Targeted validation passes: npm test -- copilot-model-catalog-sync.test.ts.

github-actions · 2026-09-12T17:19:58Z

✅ Copilot review passed with no inline comments.

@github-actions[bot] Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

github-actions · 2026-09-12T17:20:25Z

Documentation Preview

Documentation has been built for this PR.

Download preview artifact

To view locally:

Download the docs-preview-pr-8483 artifact from the workflow run
Unzip and open index.html in your browser

Built from commit 5a6f352

github-actions · 2026-09-12T17:24:28Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	94.09%	94.10%	➡️ +0.01%
Statements	92.76%	92.77%	➡️ +0.01%
Functions	93.48%	93.48%	➡️ +0.00%
Branches	86.63%	86.64%	📈 +0.01%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-09-12T17:35:58Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-09-12T17:36:00Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

Warning

Firewall blocked 7 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
msfeed25.pkgs.visualstudio.com
www.google.com
www.gstatic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "msfeed25.pkgs.visualstudio.com"
    - "www.google.com"
    - "www.gstatic.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-09-12T17:36:00Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-09-12T17:36:01Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation

github-actions · 2026-09-12T17:36:02Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

github-actions · 2026-09-12T17:36:02Z

❌ Smoke Copilot BYOK AOAI (api-key) reports failed. AOAI BYOK (api-key) mode investigation needed...

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)

github-actions · 2026-09-12T17:36:04Z

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #8483

github-actions · 2026-09-12T17:36:05Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-09-12T17:36:05Z

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-09-12T17:36:07Z

❌ Smoke Copilot BYOK AOAI (Entra) reports failed. AOAI BYOK (Entra) mode investigation needed...

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)

github-actions · 2026-09-12T17:36:10Z

✅ Smoke Claude passed

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #8483

github-actions · 2026-09-12T17:36:12Z

❌ Smoke Gemini reports failed. Facets need polishing...

💎 Faceted by Smoke Gemini

github-actions · 2026-09-12T17:36:12Z

📰 DEVELOPING STORY: Smoke Docker Sbx reports failed. Our correspondents are investigating the incident...

📰 BREAKING: Report filed by Smoke Docker Sbx

github-actions · 2026-09-12T17:36:19Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

github-actions · 2026-09-12T17:39:14Z

@lpcox Smoke test results for network isolation egress enforcement:

EGRESS_RESULT allow=pass deny=pass

✅ Allowed domain (github.com) reachable: allowed=200
✅ Non-allowed domain (example.com) blocked: CONNECT tunnel failed, response 403

Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:39:39Z

Smoke Test: Copilot BYOK (Direct) Mode ✅

✅ GitHub MCP connectivity (2 recent merged PRs fetched)
✅ GitHub.com connectivity (HTTP 200)
✅ File write/read test (test file confirmed)
✅ BYOK inference test (prompt received & processed)

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY) via api-proxy → api.githubcopilot.com

Status: PASS

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:39:40Z

Copilot Engine Smoke Test

✅ MCP: PR chore(workflows): upgrade gh-aw to v0.89.8 #8492 (chore(workflows): upgrade gh-aw to v0.89.8), PR docs: clarify arc-dind tool staging and --mount rw/ro output-path pitfalls #8457 (docs: arc-dind clarifications)
✅ github.com connectivity (HTTP 200)
✅ File write/read test

Overall: PASS

cc @lpcox

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:39:52Z

Smoke Test: Claude Engine Validation

Check	Result
API status	✅ PASS
`gh` check	✅ PASS
File status	✅ PASS

Overall result: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See Network Configuration for more information.

Generated by Smoke Claude for #8483 · claude · haiku45 · 55.9 AIC · ⊞ 4.5K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:40:03Z

Smoke Test: Services Connectivity

Redis PING: ✅ (PONG)
PostgreSQL pg_isready: ✅ (accepting connections)
PostgreSQL SELECT 1: ✅ (1)

Overall: PASS

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:41:41Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.14	Python 3.12.14	✅ YES
Node.js	v24.20.0	v22.23.2	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Overall: FAILED — Node.js version mismatch between host and chroot environments. The smoke-chroot label was not added since not all tests passed.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:41:47Z

chore(workflows): upgrade gh-aw to v0.89.8
docs: clarify arc-dind tool staging and --mount rw/ro output-path pitfalls
GitHub PR review/detail: ✅
Playwright title check: ✅
File write + cat: ✅
Discussion comment: ❌
AWF build: ✅
Overall: FAIL

Warning

Firewall blocked 7 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
msfeed25.pkgs.visualstudio.com
www.google.com
www.gstatic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "msfeed25.pkgs.visualstudio.com"
    - "www.google.com"
    - "www.gstatic.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:41:47Z

📡 Smoke Test: API Proxy OTel Tracing — Results

Scenario	Result
1. Module Loading	✅ `otel.js` loaded successfully; `isEnabled()`=true; exports include `startRequestSpan`, `setTokenAttributes`, `setBudgetAttributes`, `endSpan`, `endSpanError`, `shutdown`, `isEnabled`, plus internal test hooks
2. Test Suite	✅ 68/68 tests passed across 3 suites (`otel.test.js`, otel-serialization, otel-exporters)
3. Env Var Forwarding	✅ `env-passthrough.ts` forwards `GITHUB_AW_OTEL_TRACE_ID`/`GITHUB_AW_OTEL_PARENT_SPAN_ID` to the agent; `api-proxy-env-config.ts` forwards those plus `GH_AW_OTLP_ENDPOINTS`/`OTEL_EXPORTER_OTLP_ENDPOINT` to api-proxy
4. Token Tracker Integration	✅ `onUsage` callback present in `token-tracker-http.js` as the OTEL hook point
5. OTEL Diagnostics	✅ Spans exported (1 resourceSpans record captured this run, e.g. `gh-aw.agent.setup` span with GenAI/gh-aw resource attributes); no api-proxy-scoped `otel.jsonl` was produced this run (no LLM calls routed through api-proxy in this workflow), which is expected

Summary: All 5 scenarios passed. OTEL tracing integration in the api-proxy sidecar is working as expected.

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-09-12T17:42:04Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A (build only)	✅ PASS
C++	json	✅	N/A (build only)	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A (run only)	✅ PASS
.NET	json-parse	✅	N/A (run only)	✅ PASS
Go	color	✅	ok	✅ PASS
Go	env	✅	ok	✅ PASS
Go	uuid	✅	ok	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — PASS

Notes:

Java: initial mvn compile/test runs failed with Could not create local repository at ~/.m2/repository because ~/.m2 was root-owned and not writable in this sandbox (environment-specific issue, not firewall-related). Worked around by pointing Maven at an alternate writable local repo (-Dmaven.repo.local=/tmp/gh-aw/agent/m2repo); the configured settings.xml proxy (squid-proxy:3128) was applied correctly (visible via JAVA_TOOL_OPTIONS), and both gson and caffeine compiled and passed all tests after the workaround.
No clone failures across any of the 8 ecosystems.

Generated by Build Test Suite for #8483 · copilot · auto · 43.5 AIC · ⊞ 10.6K · ◷
_{Add label ready-for-aw to run again}

chore: update model-to-API mapping (2026-09-12)

c9487ba

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

lpcox marked this pull request as ready for review September 12, 2026 15:26

Copilot AI balanced review requested due to automatic review settings September 12, 2026 15:26

Copilot started reviewing on behalf of lpcox September 12, 2026 15:27 View session

Copilot AI reviewed Sep 12, 2026

View reviewed changes

Copilot started work on behalf of lpcox September 12, 2026 17:15 View session

test: exclude gated Rosalind model from Copilot catalog

9e2f443

Copilot finished work on behalf of lpcox September 12, 2026 17:17

Copilot AI requested a review from lpcox September 12, 2026 17:17

lpcox added the ready-for-aw label Sep 12, 2026

lpcox had a problem deploying to aoai-model September 12, 2026 17:36 — with GitHub Actions Failure

github-actions Bot added the smoke-copilot-network-isolation Copilot network-isolation egress smoke test label Sep 12, 2026

github-actions Bot added the smoke-copilot-byok label Sep 12, 2026

github-actions Bot added the smoke-copilot label Sep 12, 2026

github-actions Bot added the smoke-claude label Sep 12, 2026

github-actions Bot mentioned this pull request Sep 12, 2026

[aw] Smoke Gemini failed #8493

Closed

github-actions Bot added the smoke-services label Sep 12, 2026

github-actions Bot mentioned this pull request Sep 12, 2026

[aw] Smoke Docker Sbx failed #8494

Closed

lpcox deployed to aoai-model September 12, 2026 17:40 — with GitHub Actions Active

This was referenced Sep 12, 2026

[aw] Smoke Copilot BYOK AOAI (api-key) failed #8496

Closed

[aw] Smoke Copilot BYOK AOAI (Entra) failed #8497

Closed

github-actions Bot mentioned this pull request Sep 12, 2026

[aw] Smoke Codex is missing required tool #8498

Closed

lpcox merged commit 53ffa4e into main Sep 12, 2026
174 of 179 checks passed

lpcox deleted the chore/update-model-api-mapping-2026-09-12-db40218c67d606bb branch September 12, 2026 20:51

github-actions Bot mentioned this pull request Sep 12, 2026

Support "auto" model for Pi and Codex via provider-prefix stripping #8500

Merged

Conversation

github-actions Bot commented Sep 12, 2026

Summary

Changes

Verification

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Suppressed comments (1)

Uh oh!

lpcox commented Sep 12, 2026

Uh oh!

Copilot AI commented Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026

Documentation Preview

Uh oh!

github-actions Bot commented Sep 12, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

github-actions Bot commented Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026

Smoke Test: Copilot BYOK (Direct) Mode ✅

Uh oh!

github-actions Bot commented Sep 12, 2026

Uh oh!

github-actions Bot commented Sep 12, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Sep 12, 2026

Smoke Test: Services Connectivity

Uh oh!

github-actions Bot commented Sep 12, 2026

Chroot Version Comparison Results

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading

github-actions Bot commented Sep 12, 2026 •

edited

Loading