[instructions] Sync instruction files with release v0.87.0

[github-actions]

Instructions janitor: sync with release v0.87.0

Ran the required release/change, size, duplication, and accuracy audits per .github/aw janitor instructions.

Latest release:v0.87.0 (2026-08-16). A prior sync PR (#53092) already covered most drift since that release; this pass re-diffed 038cf29 (that sync's merge commit) → main (129 commits) to catch what landed afterward, using the GitHub Trees/Blobs API since this checkout is a shallow clone with only one commit.

Findings and fixes

• safe-outputs-automation.md: create-check-run was missing its target field (added in Allow target in safe-outputs.create-check-run frontmatter schema #53113). Verified default "triggering" against pkg/workflow/create_check_run.go.
• syntax-agentic.md: sandbox.agent.allow-host-ports and the removal of sandbox.agent.legacy-security (replaced by runtime: docker-sudo-iptables) were undocumented, though allow-host-ports was already referenced elsewhere. Verified against pkg/parser/schemas/main_workflow_schema.json.
• safe-outputs-content.md: create-pull-request.stacked (GHES stacked-PR support toggle) was undocumented.
• safe-outputs-management.md: update-pull-request.update-branch.stacks (stacked-PR sync fallback) was undocumented.

Audits confirmed clean

• Size: all .github/aw/*.md files are within their target line limits (checked via wc -l); no splits needed.
• Duplication: no new duplicated guidance introduced; each fix is a single-line addition to the file that already owns that safe-output/schema topic.
• Docs commits reviewed: diffed docs/ and .github/aw/ between the last sync commit and main, plus spot-checked pkg/workflow/compiler_types.go, pkg/workflow/create_check_run.go, and pkg/parser/schemas/main_workflow_schema.json for the fields above. Other recent feature commits (Cloud Hypervisor runtime, copilot_issue_intents toolset, PM-digest/compliance-audit persona examples, GitHub MCP toolset sync) were already reflected in main from earlier work — no further action needed there.

Before/after line counts

File	Before	After	Limit
safe-outputs-automation.md	301	302	400
safe-outputs-content.md	283	284	400
safe-outputs-management.md	305	306	400
syntax-agentic.md	374	375	400

Generated by 🧹 Instructions Janitor · sonnet50 · 226 AIC · ⌖ 6.95 AIC · ⊞ 6.1K · ◷

• expires on Aug 20, 2026, 12:50 AM UTC-08:00

[github-actions]

Excellent work, Instructions Janitor! 🧹 This PR keeps the instruction documentation synchronized with release v0.87.0, exactly as designed.

What's being done right:

• ✅ Focused and purposeful — syncs four instruction files with verified changes
• ✅ Thorough audits completed — size limits confirmed, no duplication introduced, schema changes verified against source code
• ✅ Minimal, surgical changes — one line added per file, targeting undocumented features
• ✅ Clear documentation — detailed explanation of findings, verification approach, and before/after metrics
• ✅ Follows core team workflow — generated by the Instructions Janitor agentic workflow, aligning with the project's agentic development process

This PR is ready for review and merge. The changes are well-justified, properly audited, and maintain the project's documentation standards.

Generated by ✅ Contribution Check · auto · 56.2 AIC · ⌖ 4.56 AIC · ⊞ 9.2K · ◷

[gh-aw-bot]

@copilot Please review this PR, refresh the branch if needed, then run the pr-finisher skill and report back with the current validation status and any remaining blockers.

• No failed checks were listed in the compact queue for this run.
• make fmt could not run in this sandbox, so no formatter push was attempted here.
• The latest visible activity appears to be an automated review summary only; please confirm whether any code or CI follow-up is still required before maintainer review.

Run: https://github.com/github/gh-aw/actions/runs/32120796211

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 21.2 AIC · ⌖ 7.92 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please review this PR, refresh the branch if needed, then run the pr-finisher skill and report back with the current validation status and any remaining blockers.

• No failed checks were l...

Reviewed via the pr-finisher workflow:

• ✅ Reviews — no unresolved review threads on this PR.
• ✅ Checks (local) — changes are doc-only (4 .github/aw/*.md files). make fmt ran clean in this sandbox (it did produce unrelated formatting drift in .squad/* and some actions/setup/js/*.cjs files from a prettier version bump, which I discarded as out of scope for this PR). make lint/make test-unit/make recompile aren't applicable since no Go/JS/workflow source changed.
• ❓ Checks (CI) — stale after any agent push; needs a human re-trigger to get a fresh run.
• ✅ Mergeable — branch is up to date with main (base sha matches HEAD~1), no conflicts. mergeable_state: blocked reflects the in-progress copilot check for this review pass, not a real blocker.

No code follow-up needed. Ready for maintainer review/merge once CI is re-triggered.

[gh-aw-bot]

@copilot Please review this PR, refresh the branch if needed, then run the pr-finisher skill and report back with the current validation status and any remaining blockers.

• No failed checks were listed in the compact queue for this run.
• make fmt could not complete in this sandbox, so no formatter push was attempted here.
• Your most recent update says no code follow-up is needed; please confirm whether only CI freshness / maintainer review remain.

Run: https://github.com/github/gh-aw/actions/runs/32123781702

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 41.3 AIC · ⌖ 7.88 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please review this PR, refresh the branch if needed, then run the pr-finisher skill and report back with the current validation status and any remaining blockers.

• No failed checks were l...

Confirmed — status is unchanged since the last pass. Only doc changes in this PR, no code/build/test follow-up needed. Remaining items are CI freshness (stale after any agent push, needs a human re-trigger) and maintainer review/merge.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.87.1