Observe
AvailableWorkflow and job status, conclusions, repositories, and run correlation.
Keep CI in the same causal timeline as the agents that triggered it.
Sleep Mode verifies GitHub HMAC signatures before parsing, records workflow and job events with replay protection, and lets CI outcomes drive the same deterministic recovery and alert rules as local agents.
Connection profile
- Surface
- CI
- Protocol
- Signed GitHub webhooks
- Connector
- Cloud
- Version floor
- Capability negotiated
Capability matrix
What Sleep Mode can do here.
Capabilities are explicit and provider-specific. A closed capability cannot be enabled by changing a dashboard toggle.
Nudge
Fail closedCI is evidence; retry actions require a typed signed command.
Operate
AvailableAllowlisted test/build commands may be dispatched to a paired device.
Replay protection
AvailableHMAC verification and delivery-level deduplication before ingestion.
Runtime flow
Structured from launch to morning.
Verify
The webhook signature is checked in constant time before its JSON is trusted.
Correlate
Workflow and job events join the originating run's global audit order.
React
Failures can alert, pause, or propose a bounded local test/build recovery.
Connector guardrails
Hard lines for GitHub Actions.
- HMAC before parsing
- Delivery replay protection
- Project-scoped webhook mode
- No arbitrary workflow dispatch