App→App agentic chain on gh-aw v0.89.17 (Codex engine).
Role gate cannot admit GitHub App senders. The compiler emits GH_AW_REQUIRED_ROLES: "admin,maintainer,write" and validates the repository_dispatch sender against the collaborator-permission API. App bots are never collaborators, so it always reports none and the run skips at pre-activation (User permission 'none' does not meet requirements), even with full installation grants. The frontmatter roles: key accepts none/any but does not change the compiled value — there is no source-level override.
Proposals: exempt repository_dispatch senders (GitHub already requires contents:write to post the event), or make roles:/allowed-actors work and document values.
App→App agentic chain on gh-aw v0.89.17 (Codex engine).
Role gate cannot admit GitHub App senders. The compiler emits GH_AW_REQUIRED_ROLES: "admin,maintainer,write" and validates the repository_dispatch sender against the collaborator-permission API. App bots are never collaborators, so it always reports none and the run skips at pre-activation (User permission 'none' does not meet requirements), even with full installation grants. The frontmatter roles: key accepts none/any but does not change the compiled value — there is no source-level override.
Proposals: exempt repository_dispatch senders (GitHub already requires contents:write to post the event), or make roles:/allowed-actors work and document values.