docs: address Copilot review feedback on PR #48

- Add [SUPERSEDED by 2026-04-19] dates to AWF v0.25.24 and MCP Gateway v0.2.24 markers
- Capitalize "Don Syme" in 2026-04-19 intelligence report
- Rephrase --allow-host-ports to use <gateway-port> placeholder (consistent with custom sandbox.mcp.port note)
- Restore "### gh aw mcp inspect/list Limitation" heading above its explanatory paragraph
- Rename "Root cause commit" to "Fix commit" (the linked commit is the fix, not the cause)
- Reorder knowledge-base.md so 2026-04-19 entry sits above 2026-04-18 (newest-first)

Author: zircote

.claude/skills/gh-aw-report/knowledge-base.md

@@ -6,6 +6,30 @@
 
 ---
 
+## [2026-04-19] Daily Intelligence — AWF v0.25.25 / MCP Gateway v0.2.25 / Port 8080 Fix
+
+### gh-aw Version Bumps (2026-04-19)
+- **AWF (Actions Workflow Framework)**: v0.25.24 → **v0.25.25** (routine bump, PR #27102)
+- **MCP Gateway**: v0.2.24 → **v0.2.25** (routine bump, PR #27102)
+
+### Critical Bug Fix — MCP Gateway Port 8080 (2026-04-19)
+- **Symptom**: Silent MCP tool-call failures and safe-output timeouts
+- **Root cause**: PR #27058 moved MCP gateway from port 80 to port **8080** (non-privileged). AWF `--enable-host-access` only whitelists ports 80 and 443 by default, blocking gateway traffic on 8080.
+- **Fix**: Added `--allow-host-ports 80,443,<gateway-port>` to compiled AWF command, gated by minimum AWF version; respects custom `sandbox.mcp.port` config. Merged 2026-04-19 in PR #27080.
+- **Resolution**: Update to gh-aw v0.25.25+ (`gh aw upgrade`).
+- Source: https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d
+
+### New copilot-opt Workflow (2026-04-19)
+- gh-aw internal workflow that analyzes 14-day session history and generates 3 evidence-backed Copilot optimization issues
+- Uses Haiku model + lean toolset + prompt compaction for token efficiency
+- Source: https://github.com/github/gh-aw/commit/1378d27a7efc20f30e8fedd484fab57beea7db26
+
+### Exported Constants (2026-04-19)
+- New constants exported from pkg: `guard-policy`, `BYOK`, AWF version string
+- Source: https://github.com/github/gh-aw/commit/c842421a058e688346db5491ce80e44179df6d01
+
+---
+
 ## [2026-04-18] Intelligence Update
 
 ### GitHub MCP Server
@@ -156,29 +180,4 @@ Workflow reruns capped at 50 (2026-04-10). OIDC for Dependabot/code scanning. Co
 - **Copilot cloud agent per-org control** (April 15, 2026): Can now be enabled for selected organizations via AI Controls page → "Agent" → "Copilot Cloud Agent"
 - **REST API version 2026-03-10**: Available with breaking changes to the REST API
 
----
-
-## [2026-04-19] Daily Intelligence — AWF v0.25.25 / MCP Gateway v0.2.25 / Port 8080 Fix
-
-### gh-aw Version Bumps (2026-04-19)
-- **AWF (Actions Workflow Framework)**: v0.25.24 → **v0.25.25** (routine bump, PR #27102)
-- **MCP Gateway**: v0.2.24 → **v0.2.25** (routine bump, PR #27102)
-
-### Critical Bug Fix — MCP Gateway Port 8080 (2026-04-19)
-- **Symptom**: Silent MCP tool-call failures and safe-output timeouts
-- **Root cause**: PR #27058 moved MCP gateway from port 80 to port **8080** (non-privileged). AWF `--enable-host-access` only whitelists ports 80 and 443 by default, blocking gateway traffic on 8080.
-- **Fix**: Added `--allow-host-ports 80,443,<gateway-port>` to compiled AWF command, gated by minimum AWF version; respects custom `sandbox.mcp.port` config. Merged 2026-04-19 in PR #27080.
-- **Resolution**: Update to gh-aw v0.25.25+ (`gh aw upgrade`).
-- Source: https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d
-
-### New copilot-opt Workflow (2026-04-19)
-- gh-aw internal workflow that analyzes 14-day session history and generates 3 evidence-backed Copilot optimization issues
-- Uses Haiku model + lean toolset + prompt compaction for token efficiency
-- Source: https://github.com/github/gh-aw/commit/1378d27a7efc20f30e8fedd484fab57beea7db26
-
-### Exported Constants (2026-04-19)
-- New constants exported from pkg: `guard-policy`, `BYOK`, AWF version string
-- Source: https://github.com/github/gh-aw/commit/c842421a058e688346db5491ce80e44179df6d01
-
----
 <!-- Append new entries above this line, newest first -->

.claude/skills/gh-aw-report/references/gh-aw-architecture.md

@@ -9,7 +9,7 @@ Stable architectural facts about the GitHub Agentic Workflows ecosystem. Used by
 - **Install**: `gh extension install github/gh-aw`
 - **Purpose**: Compile markdown workflow definitions into GitHub Actions `.lock.yml` files
 - **Key commands**: `gh aw compile`, `gh aw validate`, `gh aw upgrade`, `gh aw mcp inspect`, `gh aw mcp list`
-- **AWF (Actions Workflow Framework)**: Default version **v0.25.25** (as of 2026-04-19; v0.25.24 [SUPERSEDED])
+- **AWF (Actions Workflow Framework)**: Default version **v0.25.25** (as of 2026-04-19; v0.25.24 [SUPERSEDED by 2026-04-19])
 
 ### Workflow File Structure
 - **Source**: `.github/workflows/<name>.md` — markdown with YAML frontmatter
@@ -81,7 +81,7 @@ Stable architectural facts about the GitHub Agentic Workflows ecosystem. Used by
 - **`base_ref` parameter:** On Copilot PR tools for stacked PR / feature branch workflows
 - **Insiders mode:** Opt-in experimental features via `/insiders` URL or config header
 - **HTTP mode:** Enterprise deployment with per-request OAuth token forwarding
-- **MCP Gateway:** Centralized access management for MCP servers (**v0.2.25** as of 2026-04-19; v0.2.24 [SUPERSEDED])
+- **MCP Gateway:** Centralized access management for MCP servers (**v0.2.25** as of 2026-04-19; v0.2.24 [SUPERSEDED by 2026-04-19])
   - Runs as runner user with uid/gid Docker mapping since v0.2.x (fixes "Redact secrets in logs" warnings)
   - **Port changed** from 80 → **8080** (non-privileged) in a prior PR; AWF `--allow-host-ports` added to whitelist port 8080
 

outputs/gh-aw-reports/2026-04-19.md

@@ -80,7 +80,7 @@ No new releases since v1.0.0 (2026-04-16). The stable 1.0 release with:
 
 ## 7. githubnext/agentics
 
-Minor formatting fixes (2026-04-17, don Syme). No new workflows or patterns.
+Minor formatting fixes (2026-04-17, Don Syme). No new workflows or patterns.
 
 ---
 

skills/aw-author/references/production-gotchas.md

@@ -319,15 +319,15 @@ A gh-aw change moved the MCP gateway from port **80** to port **8080** (non-priv
 gh aw upgrade
 ```
 
-This compiles `--allow-host-ports 80,443,8080` into the AWF command, allowing the agent to reach the MCP gateway.
+This compiles `--allow-host-ports 80,443,<gateway-port>` into the AWF command, allowing the agent to reach the MCP gateway. The default gateway port is `8080`.
 
 **Custom port:** If you use a custom `sandbox.mcp.port` configuration, the fix respects that value.
 
-**Root cause commit:** https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d
+**Fix commit:** https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d
 
 ---
 
-
+### `gh aw mcp inspect/list` Limitation
 
 The `gh aw mcp inspect` and `gh aw mcp list` commands do **NOT** follow `imports:` directives. They only see MCP servers declared in the direct frontmatter of the workflow file being inspected.