diff --git a/.github/workflows/audit-workflows.lock.yml b/.github/workflows/audit-workflows.lock.yml
index 3d11a8d386..3e76738157 100644
--- a/.github/workflows/audit-workflows.lock.yml
+++ b/.github/workflows/audit-workflows.lock.yml
@@ -1153,6 +1153,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1177,7 +1186,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/copilot-pr-nlp-analysis.lock.yml b/.github/workflows/copilot-pr-nlp-analysis.lock.yml
index 0ae7119006..266e31be53 100644
--- a/.github/workflows/copilot-pr-nlp-analysis.lock.yml
+++ b/.github/workflows/copilot-pr-nlp-analysis.lock.yml
@@ -1615,6 +1615,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1639,7 +1648,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/copilot-session-insights.lock.yml b/.github/workflows/copilot-session-insights.lock.yml
index c70ad2cc9c..5c233d056c 100644
--- a/.github/workflows/copilot-session-insights.lock.yml
+++ b/.github/workflows/copilot-session-insights.lock.yml
@@ -1926,6 +1926,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1950,7 +1959,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-code-metrics.lock.yml b/.github/workflows/daily-code-metrics.lock.yml
index deb0a75ba4..fcef53d6e8 100644
--- a/.github/workflows/daily-code-metrics.lock.yml
+++ b/.github/workflows/daily-code-metrics.lock.yml
@@ -1630,6 +1630,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1654,7 +1663,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-copilot-token-report.lock.yml b/.github/workflows/daily-copilot-token-report.lock.yml
index 2c270b0ef8..6b8e39ff57 100644
--- a/.github/workflows/daily-copilot-token-report.lock.yml
+++ b/.github/workflows/daily-copilot-token-report.lock.yml
@@ -1722,6 +1722,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1746,7 +1755,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml
index d11efd24d8..3ae16c9d5f 100644
--- a/.github/workflows/daily-firewall-report.lock.yml
+++ b/.github/workflows/daily-firewall-report.lock.yml
@@ -1174,6 +1174,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1198,7 +1207,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml
index ad193ed259..0a2d69831a 100644
--- a/.github/workflows/daily-issues-report.lock.yml
+++ b/.github/workflows/daily-issues-report.lock.yml
@@ -1754,6 +1754,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1778,7 +1787,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-multi-device-docs-tester.lock.yml b/.github/workflows/daily-multi-device-docs-tester.lock.yml
index 4d7e062759..04e0eb6266 100644
--- a/.github/workflows/daily-multi-device-docs-tester.lock.yml
+++ b/.github/workflows/daily-multi-device-docs-tester.lock.yml
@@ -929,6 +929,15 @@ jobs:
             setupGlobals(core, github, context, exec, io);
             const { main } = require('/tmp/gh-aw/actions/parse_firewall_logs.cjs');
             await main();
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -953,7 +962,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-news.lock.yml b/.github/workflows/daily-news.lock.yml
index 69380d70b2..a3c65bb336 100644
--- a/.github/workflows/daily-news.lock.yml
+++ b/.github/workflows/daily-news.lock.yml
@@ -1538,6 +1538,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1562,7 +1571,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml
index a942753f5c..f2b58c4e3c 100644
--- a/.github/workflows/daily-performance-summary.lock.yml
+++ b/.github/workflows/daily-performance-summary.lock.yml
@@ -1703,6 +1703,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1728,7 +1737,6 @@ jobs:
             /tmp/gh-aw/safe-inputs/logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/daily-repo-chronicle.lock.yml b/.github/workflows/daily-repo-chronicle.lock.yml
index fa1e700d8f..6b57e749e5 100644
--- a/.github/workflows/daily-repo-chronicle.lock.yml
+++ b/.github/workflows/daily-repo-chronicle.lock.yml
@@ -1379,6 +1379,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1403,7 +1412,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/deep-report.lock.yml b/.github/workflows/deep-report.lock.yml
index a179999a0a..1c34bab036 100644
--- a/.github/workflows/deep-report.lock.yml
+++ b/.github/workflows/deep-report.lock.yml
@@ -1254,6 +1254,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1278,7 +1287,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/docs-noob-tester.lock.yml b/.github/workflows/docs-noob-tester.lock.yml
index a9c0e8a8f1..922f469c0e 100644
--- a/.github/workflows/docs-noob-tester.lock.yml
+++ b/.github/workflows/docs-noob-tester.lock.yml
@@ -868,6 +868,15 @@ jobs:
             setupGlobals(core, github, context, exec, io);
             const { main } = require('/tmp/gh-aw/actions/parse_firewall_logs.cjs');
             await main();
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -892,7 +901,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/github-mcp-structural-analysis.lock.yml b/.github/workflows/github-mcp-structural-analysis.lock.yml
index c8587ed3b4..e7c25f0b1a 100644
--- a/.github/workflows/github-mcp-structural-analysis.lock.yml
+++ b/.github/workflows/github-mcp-structural-analysis.lock.yml
@@ -1428,6 +1428,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1452,7 +1461,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/org-health-report.lock.yml b/.github/workflows/org-health-report.lock.yml
index 96699bcc4d..23d230f8cc 100644
--- a/.github/workflows/org-health-report.lock.yml
+++ b/.github/workflows/org-health-report.lock.yml
@@ -1536,6 +1536,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1560,7 +1569,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/poem-bot.lock.yml b/.github/workflows/poem-bot.lock.yml
index 30ae7737af..ef1c6bc377 100644
--- a/.github/workflows/poem-bot.lock.yml
+++ b/.github/workflows/poem-bot.lock.yml
@@ -1348,6 +1348,15 @@ jobs:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
           retention-days: 30
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1372,7 +1381,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
             /tmp/gh-aw/aw.patch
           if-no-files-found: ignore
 
diff --git a/.github/workflows/portfolio-analyst.lock.yml b/.github/workflows/portfolio-analyst.lock.yml
index 398fe405ea..4abdecf669 100644
--- a/.github/workflows/portfolio-analyst.lock.yml
+++ b/.github/workflows/portfolio-analyst.lock.yml
@@ -1494,6 +1494,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1518,7 +1527,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/python-data-charts.lock.yml b/.github/workflows/python-data-charts.lock.yml
index c4d57a0ed1..3bf9f18d0a 100644
--- a/.github/workflows/python-data-charts.lock.yml
+++ b/.github/workflows/python-data-charts.lock.yml
@@ -1785,6 +1785,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1809,7 +1818,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/stale-repo-identifier.lock.yml b/.github/workflows/stale-repo-identifier.lock.yml
index 902bdcb208..1a6949b03c 100644
--- a/.github/workflows/stale-repo-identifier.lock.yml
+++ b/.github/workflows/stale-repo-identifier.lock.yml
@@ -1507,6 +1507,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1531,7 +1540,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/.github/workflows/technical-doc-writer.lock.yml b/.github/workflows/technical-doc-writer.lock.yml
index a234fef41d..d06e679065 100644
--- a/.github/workflows/technical-doc-writer.lock.yml
+++ b/.github/workflows/technical-doc-writer.lock.yml
@@ -1203,6 +1203,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1227,7 +1236,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
             /tmp/gh-aw/aw.patch
           if-no-files-found: ignore
 
diff --git a/.github/workflows/unbloat-docs.lock.yml b/.github/workflows/unbloat-docs.lock.yml
index 91d3af9b87..b98b033f8d 100644
--- a/.github/workflows/unbloat-docs.lock.yml
+++ b/.github/workflows/unbloat-docs.lock.yml
@@ -1213,6 +1213,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1237,7 +1246,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
             /tmp/gh-aw/aw.patch
           if-no-files-found: ignore
 
diff --git a/.github/workflows/weekly-issue-summary.lock.yml b/.github/workflows/weekly-issue-summary.lock.yml
index 667362ff53..4bb89ccf33 100644
--- a/.github/workflows/weekly-issue-summary.lock.yml
+++ b/.github/workflows/weekly-issue-summary.lock.yml
@@ -1310,6 +1310,15 @@ jobs:
         with:
           name: cache-memory
           path: /tmp/gh-aw/cache-memory
+      # Upload safe-outputs assets for upload_assets job
+      - name: Upload safe-outputs assets
+        if: always()
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        with:
+          name: safe-outputs-assets
+          path: /tmp/gh-aw/safeoutputs/assets/
+          retention-days: 1
+          if-no-files-found: ignore
       - name: Validate agent logs for errors
         if: always()
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
@@ -1334,7 +1343,6 @@ jobs:
             /tmp/gh-aw/mcp-logs/
             /tmp/gh-aw/sandbox/firewall/logs/
             /tmp/gh-aw/agent-stdio.log
-            /tmp/gh-aw/safeoutputs/assets/
           if-no-files-found: ignore
 
   conclusion:
diff --git a/actions/setup/js/upload_assets.cjs b/actions/setup/js/upload_assets.cjs
index cf9fc82a70..93e4fae74f 100644
--- a/actions/setup/js/upload_assets.cjs
+++ b/actions/setup/js/upload_assets.cjs
@@ -118,37 +118,37 @@ async function main() {
 
     // Process each asset
     for (const asset of uploadItems) {
-      try {
-        const { fileName, sha, size, targetFileName } = asset;
+      const { fileName, sha, size, targetFileName } = asset;
 
-        if (!fileName || !sha || !targetFileName) {
-          core.error(`Invalid asset entry missing required fields: ${JSON.stringify(asset)}`);
-          continue;
-        }
+      if (!fileName || !sha || !targetFileName) {
+        core.setFailed(`Invalid asset entry missing required fields: ${JSON.stringify(asset)}`);
+        return;
+      }
 
-        // Check if file exists in artifacts
-        const assetSourcePath = path.join("/tmp/gh-aw/safeoutputs/assets", fileName);
-        if (!fs.existsSync(assetSourcePath)) {
-          core.warning(`Asset file not found: ${assetSourcePath}`);
-          continue;
-        }
+      // Check if file exists in artifacts
+      const assetSourcePath = path.join("/tmp/gh-aw/safeoutputs/assets", fileName);
+      if (!fs.existsSync(assetSourcePath)) {
+        core.setFailed(`Asset file not found: ${assetSourcePath}`);
+        return;
+      }
 
-        // Verify SHA matches
-        const fileContent = fs.readFileSync(assetSourcePath);
-        const computedSha = crypto.createHash("sha256").update(fileContent).digest("hex");
+      // Verify SHA matches
+      const fileContent = fs.readFileSync(assetSourcePath);
+      const computedSha = crypto.createHash("sha256").update(fileContent).digest("hex");
 
-        if (computedSha !== sha) {
-          core.warning(`SHA mismatch for ${fileName}: expected ${sha}, got ${computedSha}`);
-          continue;
-        }
+      if (computedSha !== sha) {
+        core.setFailed(`SHA mismatch for ${fileName}: expected ${sha}, got ${computedSha}`);
+        return;
+      }
 
-        // Check if file already exists in the branch
-        if (fs.existsSync(targetFileName)) {
-          core.info(`Asset ${targetFileName} already exists, skipping`);
-          continue;
-        }
+      // Check if file already exists in the branch
+      if (fs.existsSync(targetFileName)) {
+        core.info(`Asset ${targetFileName} already exists, skipping`);
+        continue;
+      }
 
-        // Copy file to branch with target filename
+      // Copy file to branch with target filename
+      try {
         fs.copyFileSync(assetSourcePath, targetFileName);
 
         // Add to git
@@ -159,7 +159,8 @@ async function main() {
 
         core.info(`Added asset: ${targetFileName} (${size} bytes)`);
       } catch (error) {
-        core.warning(`Failed to process asset ${asset.fileName}: ${getErrorMessage(error)}`);
+        core.setFailed(`Failed to process asset ${fileName}: ${getErrorMessage(error)}`);
+        return;
       }
     }
 
diff --git a/pkg/workflow/compiler_yaml_main_job.go b/pkg/workflow/compiler_yaml_main_job.go
index 22a5523d10..a7311947ad 100644
--- a/pkg/workflow/compiler_yaml_main_job.go
+++ b/pkg/workflow/compiler_yaml_main_job.go
@@ -293,10 +293,9 @@ func (c *Compiler) generateMainJobSteps(yaml *strings.Builder, data *WorkflowDat
 	// This ensures artifacts are uploaded after the agent has finished modifying the cache
 	generateCacheMemoryArtifactUpload(yaml, data)
 
-	// Collect safe-outputs assets path if upload-asset is configured
-	if data.SafeOutputs != nil && data.SafeOutputs.UploadAssets != nil {
-		artifactPaths = append(artifactPaths, "/tmp/gh-aw/safeoutputs/assets/")
-	}
+	// Add safe-outputs assets artifact upload (after agent execution)
+	// This creates a separate artifact for assets that will be downloaded by upload_assets job
+	generateSafeOutputsAssetsArtifactUpload(yaml, data)
 
 	// Add error validation for AI execution logs
 	c.generateErrorValidation(yaml, engine, data)
diff --git a/pkg/workflow/publish_assets.go b/pkg/workflow/publish_assets.go
index be21e7b2f1..62d7e376bc 100644
--- a/pkg/workflow/publish_assets.go
+++ b/pkg/workflow/publish_assets.go
@@ -166,3 +166,23 @@ func (c *Compiler) buildUploadAssetsJob(data *WorkflowData, mainJobName string,
 		Needs:         needs,
 	})
 }
+
+// generateSafeOutputsAssetsArtifactUpload generates a step to upload safe-outputs assets as a separate artifact
+// This artifact is then downloaded by the upload_assets job to publish files to orphaned branches
+func generateSafeOutputsAssetsArtifactUpload(builder *strings.Builder, data *WorkflowData) {
+	if data.SafeOutputs == nil || data.SafeOutputs.UploadAssets == nil {
+		return
+	}
+
+	publishAssetsLog.Print("Generating safe-outputs assets artifact upload step")
+
+	builder.WriteString("      # Upload safe-outputs assets for upload_assets job\n")
+	builder.WriteString("      - name: Upload safe-outputs assets\n")
+	builder.WriteString("        if: always()\n")
+	fmt.Fprintf(builder, "        uses: %s\n", GetActionPin("actions/upload-artifact"))
+	builder.WriteString("        with:\n")
+	builder.WriteString("          name: safe-outputs-assets\n")
+	builder.WriteString("          path: /tmp/gh-aw/safeoutputs/assets/\n")
+	builder.WriteString("          retention-days: 1\n")
+	builder.WriteString("          if-no-files-found: ignore\n")
+}
diff --git a/specs/artifacts.md b/specs/artifacts.md
index f2fc0244af..4f9692cd41 100644
--- a/specs/artifacts.md
+++ b/specs/artifacts.md
@@ -21,10 +21,10 @@ This section provides an overview of artifacts organized by job name, with dupli
 **Artifacts Uploaded:**
 
 - `agent-artifacts`
-  - **Paths**: `/tmp/gh-aw/agent-stdio.log`, `/tmp/gh-aw/aw-prompts/prompt.txt`, `/tmp/gh-aw/aw.patch`, `/tmp/gh-aw/aw_info.json`, `/tmp/gh-aw/mcp-logs/`, `/tmp/gh-aw/safe-inputs/logs/`, `/tmp/gh-aw/safeoutputs/assets/`, `/tmp/gh-aw/sandbox/firewall/logs/`
+  - **Paths**: `/tmp/gh-aw/agent-stdio.log`, `/tmp/gh-aw/aw-prompts/prompt.txt`, `/tmp/gh-aw/aw.patch`, `/tmp/gh-aw/aw_info.json`, `/tmp/gh-aw/mcp-logs/`, `/tmp/gh-aw/safe-inputs/logs/`, `/tmp/gh-aw/sandbox/firewall/logs/`
   - **Used in**: 80 workflow(s) - agent-performance-analyzer.md, ai-moderator.md, archie.md, artifacts-summary.md, blog-auditor.md, brave.md, breaking-change-checker.md, campaign-generator.md, changeset.md, ci-coach.md, ci-doctor.md, cli-consistency-checker.md, cloclo.md, commit-changes-analyzer.md, copilot-pr-merged-report.md, copilot-pr-nlp-analysis.md, craft.md, daily-choice-test.md, daily-copilot-token-report.md, daily-fact.md, daily-file-diet.md, daily-issues-report.md, daily-news.md, daily-repo-chronicle.md, deep-report.md, dependabot-go-checker.md, dev-hawk.md, dev.md, dictation-prompt.md, example-custom-error-patterns.md, example-permissions-warning.md, example-workflow-analyzer.md, firewall.md, github-mcp-structural-analysis.md, github-mcp-tools-report.md, glossary-maintainer.md, go-fan.md, go-pattern-detector.md, grumpy-reviewer.md, hourly-ci-cleaner.md, issue-classifier.md, issue-template-optimizer.md, issue-triage-agent.md, layout-spec-maintainer.md, mcp-inspector.md, mergefest.md, metrics-collector.md, notion-issue-summary.md, org-health-report.md, pdf-summary.md, plan.md, playground-org-project-update-issue.md, playground-snapshots-refresh.md, poem-bot.md, portfolio-analyst.md, pr-nitpick-reviewer.md, python-data-charts.md, q.md, release.md, repo-tree-map.md, repository-quality-improver.md, research.md, scout.md, security-compliance.md, slide-deck-maintainer.md, smoke-copilot-playwright.md, smoke-detector.md, smoke-srt-custom-config.md, smoke-srt.md, spec-kit-execute.md, speckit-dispatcher.md, stale-repo-identifier.md, super-linter.md, technical-doc-writer.md, tidy.md, typist.md, video-analyzer.md, weekly-issue-summary.md, workflow-generator.md, workflow-health-manager.md
 - `agent-output`
-  - **Paths**: `${{ env.GH_AW_AGENT_OUTPUT }}`
+  - **Paths**: `${{ env.GH_AW_AGENT_OUTPUT }}`, `/tmp/gh-aw/safeoutputs/assets/`
   - **Used in**: 75 workflow(s) - agent-performance-analyzer.md, ai-moderator.md, archie.md, artifacts-summary.md, blog-auditor.md, brave.md, breaking-change-checker.md, campaign-generator.md, changeset.md, ci-coach.md, ci-doctor.md, cli-consistency-checker.md, cloclo.md, commit-changes-analyzer.md, copilot-pr-merged-report.md, copilot-pr-nlp-analysis.md, craft.md, daily-choice-test.md, daily-copilot-token-report.md, daily-fact.md, daily-file-diet.md, daily-issues-report.md, daily-news.md, daily-repo-chronicle.md, deep-report.md, dependabot-go-checker.md, dev-hawk.md, dev.md, dictation-prompt.md, example-workflow-analyzer.md, github-mcp-structural-analysis.md, github-mcp-tools-report.md, glossary-maintainer.md, go-fan.md, go-pattern-detector.md, grumpy-reviewer.md, hourly-ci-cleaner.md, issue-classifier.md, issue-template-optimizer.md, issue-triage-agent.md, layout-spec-maintainer.md, mcp-inspector.md, mergefest.md, notion-issue-summary.md, org-health-report.md, pdf-summary.md, plan.md, playground-org-project-update-issue.md, playground-snapshots-refresh.md, poem-bot.md, portfolio-analyst.md, pr-nitpick-reviewer.md, python-data-charts.md, q.md, release.md, repo-tree-map.md, repository-quality-improver.md, research.md, scout.md, security-compliance.md, slide-deck-maintainer.md, smoke-copilot-playwright.md, smoke-detector.md, smoke-srt.md, spec-kit-execute.md, speckit-dispatcher.md, stale-repo-identifier.md, super-linter.md, technical-doc-writer.md, tidy.md, typist.md, video-analyzer.md, weekly-issue-summary.md, workflow-generator.md, workflow-health-manager.md
 - `agent_outputs`
   - **Paths**: `/tmp/gh-aw/mcp-config/logs/`, `/tmp/gh-aw/redacted-urls.log`, `/tmp/gh-aw/sandbox/agent/logs/`
@@ -165,9 +165,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 - `agent-output`
   - **Download paths**: `/tmp/gh-aw/safeoutputs/`
   - **Used in**: 14 workflow(s) - copilot-pr-nlp-analysis.md, daily-copilot-token-report.md, daily-issues-report.md, daily-news.md, daily-repo-chronicle.md, deep-report.md, github-mcp-structural-analysis.md, org-health-report.md, poem-bot.md, portfolio-analyst.md, python-data-charts.md, stale-repo-identifier.md, technical-doc-writer.md, weekly-issue-summary.md
-- `safe-outputs-assets`
-  - **Download paths**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Used in**: 14 workflow(s) - copilot-pr-nlp-analysis.md, daily-copilot-token-report.md, daily-issues-report.md, daily-news.md, daily-repo-chronicle.md, deep-report.md, github-mcp-structural-analysis.md, org-health-report.md, poem-bot.md, portfolio-analyst.md, python-data-charts.md, stale-repo-identifier.md, technical-doc-writer.md, weekly-issue-summary.md
 
 ## Workflows
 
@@ -184,6 +181,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -257,6 +255,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -300,6 +299,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -361,6 +361,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -422,6 +423,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -478,6 +480,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -539,6 +542,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -600,6 +604,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -661,6 +666,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -727,6 +733,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -805,6 +812,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -878,6 +886,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -939,6 +948,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -1012,6 +1022,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -1068,6 +1079,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1139,6 +1151,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1160,7 +1173,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1216,10 +1228,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1237,6 +1245,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1303,6 +1312,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -1368,6 +1378,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1389,7 +1400,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1445,10 +1455,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1466,6 +1472,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1527,6 +1534,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1597,6 +1605,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1614,7 +1623,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1662,10 +1670,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1692,6 +1696,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1713,7 +1718,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1769,10 +1773,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1799,6 +1799,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1816,7 +1817,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1864,10 +1864,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1885,6 +1881,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -1906,7 +1903,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -1962,10 +1958,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -1983,6 +1975,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2044,6 +2037,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2105,6 +2099,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2166,6 +2161,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2270,6 +2266,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -2354,6 +2351,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -2366,7 +2364,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -2414,10 +2411,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -2435,6 +2428,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -2508,6 +2502,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2586,6 +2581,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -2654,6 +2650,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -2710,6 +2707,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2783,6 +2781,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2849,6 +2848,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -2904,6 +2904,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -2982,6 +2983,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3043,6 +3045,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3109,6 +3112,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3198,6 +3202,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3295,6 +3300,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3365,6 +3371,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3382,7 +3389,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -3430,10 +3436,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -3451,6 +3453,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3524,6 +3527,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3585,6 +3589,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3646,6 +3651,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3712,6 +3718,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3729,7 +3736,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
     - `/tmp/gh-aw/aw.patch`
 
 #### Job: `conclusion`
@@ -3782,10 +3788,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -3812,6 +3814,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3829,7 +3832,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -3877,10 +3879,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -3898,6 +3896,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3980,6 +3979,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -3997,7 +3997,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -4045,10 +4044,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -4066,6 +4061,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4144,6 +4140,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4214,6 +4211,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4275,6 +4273,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4348,6 +4347,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4409,6 +4409,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -4477,6 +4478,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4550,6 +4552,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4628,6 +4631,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4706,6 +4710,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `cache-memory`
   - **Upload paths**:
@@ -4792,6 +4797,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4844,6 +4850,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -4934,6 +4941,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5013,6 +5021,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5030,7 +5039,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -5078,10 +5086,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -5099,6 +5103,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5186,6 +5191,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5203,7 +5209,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
     - `/tmp/gh-aw/aw.patch`
 
 #### Job: `conclusion`
@@ -5256,10 +5261,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -5277,6 +5278,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5343,6 +5345,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent-artifacts`
   - **Upload paths**:
@@ -5399,6 +5402,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5469,6 +5473,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5486,7 +5491,6 @@ This section provides an overview of artifacts organized by job name, with dupli
     - `/tmp/gh-aw/mcp-logs/`
     - `/tmp/gh-aw/sandbox/firewall/logs/`
     - `/tmp/gh-aw/agent-stdio.log`
-    - `/tmp/gh-aw/safeoutputs/assets/`
 
 #### Job: `conclusion`
 
@@ -5534,10 +5538,6 @@ This section provides an overview of artifacts organized by job name, with dupli
 
 **Downloads:**
 
-- **Artifact**: `safe-outputs-assets` (by name)
-  - **Download path**: `/tmp/gh-aw/safeoutputs/assets/`
-  - **Depends on jobs**: [agent detection]
-
 - **Artifact**: `agent-output` (by name)
   - **Download path**: `/tmp/gh-aw/safeoutputs/`
   - **Depends on jobs**: [agent detection]
@@ -5555,6 +5555,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**:
@@ -5616,6 +5617,7 @@ This section provides an overview of artifacts organized by job name, with dupli
 - **Artifact**: `agent-output`
   - **Upload paths**:
     - `${{ env.GH_AW_AGENT_OUTPUT }}`
+    - `/tmp/gh-aw/safeoutputs/assets/`
 
 - **Artifact**: `agent_outputs`
   - **Upload paths**: