Org Weekly Report: 2026-08-11 -- 2026-08-18

Generated for rossoctl by the github-weekly-report skill.

Org-Wide Summary

Cross-Repo Highlights

Multi-repo contributors

• @rubambiza was the busiest cross-repo contributor, merging into agent-skills, automation, and workload-harness (6 PRs) — largely the org migration work: repointing reusable-workflow refs to rossoctl/.github (automation#51, workload-harness#60, agent-skills#31), decomposing program-lib.sh into portable modules (automation#50), and the link-health fixer breadcrumb (automation#56).
• @vz-ibm drove cortex and workload-harness (5 PRs) on the SPARC service: WatsonX reasoning-model support (cortex#739), request-logging docs (cortex#741), and the authbridge SPARC plugin integration in the harness (workload-harness#54).
• @evaline-ju touched cortex, examples, and rossoctl (3 PRs), including the session budget-enforcement plugin (cortex#723) and link fixes.
• @esnible was the dominant contributor in rossoctl — the busiest repo by issue volume — landing the identity-config endpoint (feat: Add PUT /{namespace}/{name}/identity-config endpoint #2369) and k8s resource-limit overrides (feat: allow k8sResourceLimits/k8sResourceRequests overrides for agents and tools #2383), plus a cortex plugin-catalog doc.

Org-wide CI

• Aggregate pass rate is 178/240 (74%). automation and operator are the clean repos at 100%.
• workload-harness drags the average down at 47% — the failing workflows are pr-verifier.yml (3 failures) and project.yml (2). cortex and rossoctl both sit at 63%, with cortex's "Security Scans" (3) and "CI" (2) the main culprits.

Security concerns (open PRs flagged SECURITY, unreviewed >7 days)

• operator#490 — APPROVED but not merged, 28 days (token-broker go.sum regen).
• cortex#677 — APPROVED but not merged, 31 days (tls_bridge upstream_insecure).
• cortex#704 — 21 days, needs review (context-guru bump).
• rossoctl#2224 — 31 days, needs review (rossocortex/kosh CLI).
• rossoctl#2235–2240 — four python base-image bumps, all ~28 days.
• examples carries the longest tail: #719/#723/#724 (~31d) and #748/#751/#753/#755 (~17d).

Dependabot accumulation

• 64 open dependabot PRs across the org — well past the batching threshold. Breakdown: examples 36, cortex 16, rossoctl 9, operator 3. The examples backlog alone is the single largest review liability this week.

Shared themes

• Org rename tail — reusable-workflow repointing and program-lib modularization landed across three repos.
• AIAC / SPARC buildout — event broker + OPA enforcement (cortex#752/Feat/terraform validation checks #754), plus harness integration, is the dominant feature thread.
• Link-health automation — clawgenti-authored broken-link fixes and reports recur across rossoctl, automation, and workload-harness.

Active Epics

Action Items

cortex

Merged PRs (11)

Top contributors: @app/dependabot (4), @vz-ibm (3), @oblinder (2), @esnible (1), @evaline-ju (1)

Open PRs (20)

Ready to Merge (1)

Changes Requested (1)

Needs Review (16)

Draft PRs (2)

• #762 — Feat: Add the lineage demo — per-request lineage from the sidecar
• #761 — Feat: Lineage telemetry plugin — two facts-only spans per exchange

CI Health

• 19/30 (63%) passed
• Failing: "Security Scans" — 3 failure(s)
• Failing: "CI" — 2 failure(s)

New Issues (3)

rossoctl

Merged PRs (6)

Top contributors: @app/dependabot (3), @esnible (2), @evaline-ju (1)

Open PRs (24)

Needs Review (19)

Draft PRs (5)

• #2368 — fix: use Istio gateway for E2E tests instead of direct service port-forwards
• #2207 — docs: Rosso vision brief + landing page (DRAFT, for review)
• #2180 — Docs: local (Kind, gate-only) skill-attestation demo harness
• #2176 — Docs: add docs-temp source and website sync trigger
• #2084 — feat(openshell): switch to upstream in-process Kubernetes driver

CI Health

• 19/30 (63%) passed
• Failing: "Cleanup Stale HyperShift Clusters" — 1 failure(s)
• Failing: "RC Release Validation" — 1 failure(s)

New Issues (15)

automation

Merged PRs (5)

Top contributors: @rubambiza (3), @clawgenti (2)

Open PRs (4)

Needs Review (3)

Draft PRs (1)

• #41 — Feat: Add a link back to the skill when opening a link issue (breadcrumb)

CI Health

• 30/30 (100%) passed

New Issues (2)

workload-harness

Merged PRs (5)

Top contributors: @vz-ibm (2), @clawgenti (1), @rubambiza (1), @yoavkatz (1)

Open PRs (1)

Needs Review (1)

CI Health

• 14/30 (47%) passed
• Failing: ".github/workflows/pr-verifier.yml" — 3 failure(s)
• Failing: ".github/workflows/project.yml" — 2 failure(s)

New Issues (1)

agent-skills

Merged PRs (2)

Top contributors: @rubambiza (2)

Open PRs (1)

Needs Review (1)

CI Health

• 22/30 (73%) passed
• Failing: ".github/workflows/pr-verifier.yml" — 4 failure(s)
• Failing: ".github/workflows/project.yml" — 2 failure(s)
• Failing: ".github/workflows/self-assign.yml" — 2 failure(s)

operator

Merged PRs (2)

Top contributors: @cwiklik (1), @Alan-Cha (1)

Open PRs (5)

Ready to Merge (1)

Needs Review (3)

Draft PRs (1)

• #478 — feat(operator): fetch JWT-SVID via go-spiffe SDK, remove spiffe-helper sidecar

CI Health

• 30/30 (100%) passed

New Issues (2)

examples

Merged PRs (1)

Top contributors: @evaline-ju (1)

Open PRs (36)

Needs Review (36)

CI Health

• 22/30 (73%) passed
• Failing: "Build-Publish" — 1 failure(s)

New Issues (1)

.github

Open PRs (1)

Ready to Merge (1)

CI Health

• 22/30 (73%) passed