[Fleet Monitor] petry-projects/.github — .github/workflows/dev-lead.yml

[don-petry]

🟠 DEGRADED: petry-projects/.github / .github/workflows/dev-lead.yml

Metric	Value
Failure Rate	36.4% (8 / 22 runs)
Status	DEGRADED
p50 Duration	15s
p95 Duration	51s
Successful Runs	12
Cancelled Runs	2

Workflow: .github/workflows/dev-lead.yml

Last updated by Fleet Monitor run on 2026-06-13.
Threshold: failure rate > 10% over the monitored window.

[don-petry]

Dev-Lead Implementation Plan

Issue: #454 — [Fleet Monitor] petry-projects/.github — .github/workflows/dev-lead.yml

Root cause

The deployed caller stub .github/workflows/dev-lead.yml has drifted from the canonical template standards/workflows/dev-lead.yml:

• It pins the reusable at @main instead of the moving @dev-lead/stable channel tag.
• It omits with: { agent_ref: dev-lead/stable }, so the reusable checks out dev-lead's own scripts/prompts from main (confirmed in failing-run inputs: agent_ref: main).

Running @main exposes this repo's dev-lead agent to every in-progress change on the reusable — the self-host circular dependency the standard (ci-standards.md#dev-lead-agent) explicitly warns against. All 8 observed failures fail at the reusable's Run issue step while executing bleeding-edge main code. The org compliance check check_dev_lead_stub enforces the @dev-lead/stable pin + agent_ref for every repo except .github itself (it is exempted), which is why this drift went uncaught.

Scope

Re-sync .github/workflows/dev-lead.yml to the canonical template so it pins @dev-lead/stable and threads agent_ref: dev-lead/stable, and add a regression guard test (since the compliance audit skips .github).

Implementation Checklist

• .github/workflows/dev-lead.yml — change pin to @dev-lead/stable, add with: { agent_ref: dev-lead/stable }, restore the explanatory comment block (matching standards/workflows/dev-lead.yml verbatim)

Tests to Write

• test/workflows/dev-lead/stub-contract.bats — assert the deployed stub pins @dev-lead/stable, passes agent_ref: dev-lead/stable, has no concurrency: block, grants statuses: read, and matches the canonical template byte-for-byte

Test Command

bats test/workflows/dev-lead/ (plus repo lint: bash .dev-lead/scripts/dev-lead-lint.sh, yamllint, actionlint)