[github-actions]

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: README.md

Research focus

network: frontmatter egress control and the Agent Workflow Firewall (AWF) — deny-by-default posture, ecosystem identifiers vs. invalid bare shorthands, wildcard domain rules, and verifying results via gh aw audit --parse / firewall.md.

Gap identified

Steps 16–17 teach learners to fetch live data and add MCP tools, and several side quests reference network.allowed in passing for security framing, but no core step teaches the network: field itself as a hands-on configuration surface. Learners adding MCP tools or external API calls had no guided path to correctly scope egress, risking over-allowing (defeating the security model already introduced) or hitting confusing compile-time errors from invalid ecosystem shorthands (e.g. npm instead of node).

Files updated

• New: workshop/17b-network-egress-control.md — new node teaching network: configuration, ecosystem identifiers, wildcard domains, and firewall log verification.
• workshop/README.md — added curriculum table row for the new step between Step 17 and Step 18.
• workshop/17-add-mcp-tools.md — updated the "Next" link to point to the new node instead of skipping straight to Step 18.

Research metadata location

An XML <research-metadata> comment block is embedded at the end of workshop/17b-network-egress-control.md, recording the selected focus, top source URLs (including the LLMs.txt download source), and a one-paragraph reasoning summary.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

Generated by 🧠 Training Plan Researcher · copilot · auto · 73.6 AIC · ⌖ 14.3 AIC · ⊞ 6.9K · ◷

• expires on Sep 19, 2026, 4:07 PM UTC

[github-actions]

Protected files were modified in this pull request and require manual scrutiny before merge.

Please verify that each protected-file change is intentional, policy-compliant, and safe:

• Protected files: README.md

[github-actions]

This pull request was automatically closed because it expired on 2026-09-19T16:07:49.782Z.

Closed by Workflow