Add Claude Code CLI startup auth hosts to the default network allowlist

[Copilot]

Two Claude Code CLI workflows crashed at startup with ERR_CONFIG: no structured log entries were produced, zero token_usage, and no api.anthropic.com traffic in the firewall log at all. The zero attempted (not blocked) connections to the model API, plus Claude's telemetry hosts disappearing from the log in the same run, point at the CLI dying before it reached the model API — not at a regression on the Anthropic egress path itself.

Root cause

Current Claude Code CLI versions contact two hosts during startup that ClaudeDefaultDomains does not cover:

• platform.claude.com — OAuth/authentication endpoint, which replaced console.anthropic.com
• claude.ai — sign-in state and feature/config lookups

AWF's automatic subdomain matching on anthropic.com does not extend to claude.ai/claude.com, so these connections were dropped by iptables before Squid could name the destination — which is exactly the single (unknown) blocked entry observed in the failed run (see filterActionableDomains in pkg/cli/audit_report_analysis.go). The CLI exited before emitting a structured log entry, so the guardrail in log_parser_bootstrap.cjs classified it as a generic startup/config failure.

The known hosts were verified as not regressed: api.anthropic.com, anthropic.com, statsig.anthropic.com, sentry.io are all still in the engine defaults, and the OTLP hosts come from shared/otlp.md (*.sentry.io, *.grafana.net). The other candidates in the 08-19 → 08-21 window were also ruled out: #54055 dropped package registries only and left model/API transport domains untouched, and the AWF v0.28.2/v0.28.3 bumps are version-only changes to an external component.

Changes

• pkg/workflow/domains.go — add claude.ai and platform.claude.com to ClaudeDefaultDomains, each annotated with the startup dependency it serves.
• pkg/workflow/domains_test.go — TestClaudeDefaultDomains asserts both hosts are present.
• .github/workflows/*.lock.yml — regenerated via make recompile (60 Claude workflows); the AWF config for both affected workflows now carries the hosts.
• .changeset/ — patch changeset.

varClaudeDefaultDomains= []string{
"cdn.playwright.dev",
+"claude.ai", // Claude Code CLI startup: sign-in state and feature/config lookups"codeload.github.com",
..."packages.microsoft.com",
+"platform.claude.com", // Claude Code CLI startup: OAuth/authentication endpoint (replaced console.anthropic.com)"playwright.download.prss.microsoft.com",
}

Scope is deliberately limited to first-party Anthropic auth hosts rather than a broader *.claude.com wildcard.

Not covered here

Re-running the two workflows to confirm recovery (verification step 3 in the issue) requires triggering workflow runs, which this agent's token cannot do — that needs to happen after merge, checking for token_usage > 0 and api.anthropic.com call parity with the ~54-call baseline.

• Fixes[aw-failures] [P0] Claude Code CLI startup crashes — Anthropic API egress blackout #54462

---

pr-sous-chef run: https://github.com/github/gh-aw/actions/runs/32477751698> Generated by 👨‍🍳 PR Sous Chef · gpt54 · 16.4 AIC · ⌖ 8.3 AIC · ⊞ 6.9K · ◷

_{Comment /souschef to run again}

[pelikhan]

@copilot Claude domain set should not have a playwright domains. Keep it minimal.

[Copilot]

Pull request overview

Adds Claude Code’s required startup authentication hosts to the engine’s default network allowlist, addressing the zero-token startup failures reported in #54462.

Changes:

• Adds claude.ai and platform.claude.com.
• Extends regression coverage and adds a patch changeset.
• Regenerates 60 Claude workflow lockfiles.

Validation: Unit, security, build, and YAML checks pass; lint-go fails on the pre-existing error message at pkg/workflow/domains.go:27.

Show a summary per file

File	Description
.changeset/claude-default-domains-auth-hosts.md	Documents the patch.
pkg/workflow/domains.go	Adds startup hosts.
pkg/workflow/domains_test.go	Tests both hosts.
.github/workflows/agent-job-health.lock.yml	Regenerates allowlist.
.github/workflows/api-consumption-report.lock.yml	Regenerates allowlist.
.github/workflows/approach-validator.lock.yml	Regenerates allowlist.
.github/workflows/archivx-agentic-workflows-analyzer.lock.yml	Regenerates allowlist.
.github/workflows/audit-workflows.lock.yml	Regenerates allowlist.
.github/workflows/avenger.lock.yml	Regenerates allowlist.
.github/workflows/aw-failure-investigator.lock.yml	Regenerates allowlist.
.github/workflows/blog-auditor.lock.yml	Regenerates allowlist.
.github/workflows/ci-doctor.lock.yml	Regenerates allowlist.
.github/workflows/claude-code-user-docs-review.lock.yml	Regenerates allowlist.
.github/workflows/cli-version-checker.lock.yml	Regenerates allowlist.
.github/workflows/cloclo.lock.yml	Regenerates allowlist.
.github/workflows/copilot-agent-analysis.lock.yml	Regenerates allowlist.
.github/workflows/copilot-session-insights.lock.yml	Regenerates allowlist.
.github/workflows/daily-agentrx-trace-optimizer.lock.yml	Regenerates allowlist.
.github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml	Regenerates allowlist.
.github/workflows/daily-aw-cross-repo-compile-check.lock.yml	Regenerates allowlist.
.github/workflows/daily-caveman-optimizer.lock.yml	Regenerates allowlist.
.github/workflows/daily-choice-test.lock.yml	Regenerates allowlist.
.github/workflows/daily-doc-healer.lock.yml	Regenerates allowlist.
.github/workflows/daily-elixir-credo-snippet-audit.lock.yml	Regenerates allowlist.
.github/workflows/daily-rendering-scripts-verifier.lock.yml	Regenerates allowlist.
.github/workflows/daily-safe-output-optimizer.lock.yml	Regenerates allowlist.
.github/workflows/daily-safe-outputs-conformance.lock.yml	Regenerates allowlist.
.github/workflows/daily-safeoutputs-git-simulator.lock.yml	Regenerates allowlist.
.github/workflows/daily-vulnhunter-scan.lock.yml	Regenerates allowlist.
.github/workflows/daily-yamllint-fixer.lock.yml	Regenerates allowlist.
.github/workflows/deep-report.lock.yml	Regenerates allowlist.
.github/workflows/deepsec-security-scan.lock.yml	Regenerates allowlist.
.github/workflows/design-decision-gate.lock.yml	Regenerates allowlist.
.github/workflows/detection-analysis-report.lock.yml	Regenerates allowlist.
.github/workflows/developer-docs-consolidator.lock.yml	Regenerates allowlist.
.github/workflows/eslint-refiner.lock.yml	Regenerates allowlist.
.github/workflows/example-workflow-analyzer.lock.yml	Regenerates allowlist.
.github/workflows/github-mcp-structural-analysis.lock.yml	Regenerates allowlist.
.github/workflows/github-mcp-tools-report.lock.yml	Regenerates allowlist.
.github/workflows/go-fan.lock.yml	Regenerates allowlist.
.github/workflows/go-logger.lock.yml	Regenerates allowlist.
.github/workflows/go-pattern-detector.lock.yml	Regenerates allowlist.
.github/workflows/hourly-ci-cleaner.lock.yml	Regenerates allowlist.
.github/workflows/instructions-janitor.lock.yml	Regenerates allowlist.
.github/workflows/lockfile-stats.lock.yml	Regenerates allowlist.
.github/workflows/portfolio-analyst.lock.yml	Regenerates allowlist.
.github/workflows/prompt-clustering-analysis.lock.yml	Regenerates allowlist.
.github/workflows/ruflo-backed-task.lock.yml	Regenerates allowlist.
.github/workflows/safe-output-health.lock.yml	Regenerates allowlist.
.github/workflows/scout.lock.yml	Regenerates allowlist.
.github/workflows/semantic-function-refactor.lock.yml	Regenerates allowlist.
.github/workflows/sergo.lock.yml	Regenerates allowlist.
.github/workflows/smoke-agent-all-merged.lock.yml	Regenerates allowlist.
.github/workflows/smoke-agent-all-none.lock.yml	Regenerates allowlist.
.github/workflows/smoke-agent-public-approved.lock.yml	Regenerates allowlist.
.github/workflows/smoke-agent-public-none.lock.yml	Regenerates allowlist.
.github/workflows/smoke-agent-scoped-approved.lock.yml	Regenerates allowlist.
.github/workflows/smoke-claude.lock.yml	Regenerates allowlist.
.github/workflows/smoke-claude-on-copilot.lock.yml	Regenerates allowlist.
.github/workflows/smoke-github-claude.lock.yml	Regenerates allowlist.
.github/workflows/static-analysis-report.lock.yml	Regenerates allowlist.
.github/workflows/step-name-alignment.lock.yml	Regenerates allowlist.
.github/workflows/typist.lock.yml	Regenerates allowlist.

Review details

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 23/63 changed files
• Comments generated: 0
• Review effort level: Balanced

[github-actions]

✅ Design Decision Gate 🏗️ completed the design decision gate check.

No ADR enforcement needed: PR #54489 does not have the 'implementation' label and has 0 new lines of code in business logic directories (threshold: 100).

🏗️ ADR gate enforced by Design Decision Gate 🏗️

[github-actions]

✅ PR Code Quality Reviewer completed the code quality review.

🔎 Code quality review by PR Code Quality Reviewer

[github-actions]

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer

[github-actions]

✅ Ponytail Reviewer completed successfully!

Reviewed PR #54489 for over-engineering per ponytail-review skill. Changes are minimal and appropriate: two domain string additions to ClaudeDefaultDomains with brief inline comments explaining why, matching test coverage, plus a changeset and generated lock.yml. No speculative abstractions, reinvented code, or unneeded flexibility found. Lean already. Ship.

Generated by Ponytail Reviewer for #54489

[github-actions]

✅ Test Quality Sentinel completed test quality analysis.

Test Quality Sentinel skipped because pre-fetch PR data was unavailable: unable to fetch test file diff

🧪 Test quality analysis by Test Quality Sentinel

[Copilot]

@copilot Claude domain set should not have a playwright domains. Keep it minimal.

Removed cdn.playwright.dev and playwright.download.prss.microsoft.com from ClaudeDefaultDomains in e6eb767. They were redundant anyway — a dedicated PlaywrightDomains list already exists and is merged in dynamically when the playwright tool is enabled. Recompiled all workflows to reflect the minimal set.

[github-actions]

Comment Memory

reviewed_at: 2026-08-21T00:00:00Z
review_event: COMMENT
top_themes:
- no actionable issues found in changed lines
- claude startup allowlist widened with targeted host additions and test coverage
files_reviewed:
- .changeset/claude-default-domains-auth-hosts.md
- pkg/workflow/domains.go
- pkg/workflow/domains_test.go
- .github/workflows/*.lock.yml
comment_count: 0

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

🔎 Code quality review by PR Code Quality Reviewer · gpt54 · 7.84 AIC · ⌖ 6.74 AIC · ⊞ 7K · ◷
_{Comment /review to run again}

[github-actions]

No actionable issues found in the changed lines. The patch is narrowly scoped, the new Claude startup hosts are added consistently to the source list and regenerated lockfiles, and the regression test now guards both hosts explicitly.

🔎 Code quality review by PR Code Quality Reviewer · gpt54 · 7.84 AIC · ⌖ 6.74 AIC · ⊞ 7K
_{Comment /review to run again}

[github-actions]

The change is minimal and correct: claude.ai and platform.claude.com are inserted in alphabetical order with clear, descriptive inline comments explaining why each host is needed. The test file is updated accordingly, and a changeset entry is included. No issues found.

🧵 Reviewed using Impeccable skills by Impeccable Skills Reviewer · sonnet46 · 22.1 AIC · ⌖ 11.6 AIC · ⊞ 5.7K

[github-actions]

Skills-Based Review 🧠

Applied /diagnosing-bugs — the root cause is correctly identified and addressed, and a regression test is included.

📋 Key Themes & Highlights

Positive Highlights

• ✅ Excellent diagnostic write-up: zero token_usage + missing telemetry hosts → CLI dying before model API → (unknown) blocked entry. Clear chain of evidence.
• ✅ Root cause addressed (not just symptom): two missing startup hosts added directly to ClaudeDefaultDomains.
• ✅ TestClaudeDefaultDomains asserts both new hosts, providing a regression anchor.
• ✅ Inline comments in domains.go explain why each host is needed.

One Minor Observation

claude.ai is a bare domain entry. The firewall's subdomain matching policy will determine whether this also covers subdomains like app.claude.ai. If the CLI contacts subdomains not covered by this entry, a follow-up failure could occur that is harder to diagnose. Worth noting which specific endpoints under claude.ai were observed in the firewall log, if that data is available.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · sonnet46 · 20.7 AIC · ⌖ 9.86 AIC · ⊞ 7.8K
_{Comment /matt to run again}

[gh-aw-bot]

@copilot Quick triage nudge for PR #54489.

• Please refresh the branch if GitHub offers it.
• After updates, run the pr-finisher skill and leave a concise maintainer handoff with validation status and merge readiness.

Run: https://github.com/github/gh-aw/actions/runs/32477751698

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 16.4 AIC · ⌖ 8.3 AIC · ⊞ 6.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot resolve the merge conflicts in this pull request

Merged origin/main in 88ea646 and resolved the conflicts, which were confined to generated .lock.yml files. Regenerated all 286 workflows via make recompile in eb51190 to ensure they reflect the merged source. Build, go test ./pkg/workflow/..., and incremental lint all pass.

[gh-aw-bot]

@copilot

• This PR looks narrowly scoped and recent review feedback is positive, but the branch is now in a conflicting state and there is a maintainer request to resolve that. Please run make merge-main to resolve the merge conflicts on this branch, then run the pr-finisher skill and leave a concise maintainer handoff with validation status, merge readiness, and any remaining human action.

Run: https://github.com/github/gh-aw/actions/runs/32512483892

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 13.3 AIC · ⌖ 8.32 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot

• This PR looks narrowly scoped and recent review feedback is positive, but the branch is now in a conflicting state and there is a maintainer request to resolve that. Please run `make merge...

Resolved via make merge-main in d391e1b — merged origin/main and regenerated all 286 workflow lock files. make build, go test ./pkg/workflow/... -run TestClaudeDefaultDomains, and full make agent-report-progress (with tests) all pass. Branch is up to date with main and mergeable.

[github-actions]

PR Triage: category=bug · risk=medium · priority=high · score=73/100

• Impact 28 (unblocks fully broken Claude Code CLI workflows) + Urgency 25 (active startup crashes) + Quality 20 (2 approving reviews)
• Recommended action: fast_track
• Batch: lockfile-regen-cluster

Generated by 🔧 PR Triage Agent · auto · 78.9 AIC · ⌖ 6.57 AIC · ⊞ 8.3K · ◷

[gh-aw-bot]

@copilot

• Please refresh the branch if GitHub offers it.
• After refreshing, run the pr-finisher skill and leave a concise maintainer handoff with validation status, merge readiness, and any remaining human action.

Run: https://github.com/github/gh-aw/actions/runs/32515777962

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 6.29 AIC · ⌖ 8.15 AIC · ⊞ 6.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot

• Please refresh the branch if GitHub offers it....

Refreshed via make merge-main (24843c4) — merged latest origin/main and regenerated all 286 workflow lock files. make build and go test ./pkg/workflow/... -run TestClaudeDefaultDomains pass. make agent-report-progress's golint-custom step fails, but this is pre-existing on origin/main itself (unrelated files like safe_outputs_actions.go, engine_definition.go, schedule_preprocessing.go) — verified by running the same linter against a clean origin/main checkout, which reproduces identical findings. Branch is up to date with main and mergeable; no further action needed from me on this refresh.

[pelikhan]

@copilot resolve the merge conflicts in this pull request

[gh-aw-bot]

@copilot

• The branch is back in a conflicting state and the latest maintainer comment asks to resolve it again. Please run make merge-main on this branch, rerun the relevant validation, then run the pr-finisher skill and leave a concise maintainer handoff with merge readiness and any remaining human action.

Run: https://github.com/github/gh-aw/actions/runs/32527578560

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 39.2 AIC · ⌖ 8.24 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot resolve the merge conflicts in this pull request

Resolved in d268a7d — merged origin/main; conflicts were confined to generated .lock.yml files, resolved by taking upstream and regenerating all 286 workflows via make recompile. make build and go test ./pkg/workflow/... -run TestClaudeDefaultDomains pass.

[Copilot]

@copilot

• The branch is back in a conflicting state and the latest maintainer comment asks to resolve it again. Please run make merge-main on this branch, rerun the relevant validation, then run t...

Branch is already up to date with origin/main (merged in d268a7d, which was pushed after this notification was generated) — no conflicts currently exist. make build and go test ./pkg/workflow/... -run TestClaudeDefaultDomains pass. Merge-ready.