[blog] Weekly blog post – 2026-09-07

[github-actions]

This PR adds a weekly update blog post covering activity in github/gh-aw from the past week.

What's Covered

• Release v0.88.4: trusted enclave sensitivity (#58328), DIFC policy generation (#58302), aw.json project support in add (#58267), daily Linear/Jira smoke issues (#58320), and several bug fixes.
• Notable PRs: Migrate agentic workflows to Cloud Hypervisor, Wire dynamic enclave delegation controller, Add compiler support for dynamic repository enclave policies, Reclassify policy-driven safe-output declines.
• 🤖 Agent of the Week: dead-code-remover, based on real log data from its last 3 runs (#58996, #58822).

File Added

• docs/src/content/docs/blog/2026-09-07-weekly-update.md

---

Generated by the weekly-blog-post-writer workflow.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.github.com

[!TIP]
api.github.com is blocked because GitHub API access uses the built-in GitHub tools by default. Instead of adding api.github.com to network.allowed, use tools.github.mode: gh-proxy for direct pre-authenticated GitHub CLI access without requiring network access to api.github.com:

tools:
  github:
    mode: gh-proxy

See GitHub Tools for more information on gh-proxy mode.

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.github.com"

See Network Configuration for more information.

Generated by ✍️ Weekly Blog Post Writer · copilot · auto · 54.2 AIC · ⌖ 15.7 AIC · ⊞ 14.1K · ◷

• expires on Sep 13, 2026, 6:59 PM UTC-08:00

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.88.6