[deep-report] metrics-glossary.md says Daily Firewall Report covers last 7 days, but workflow actually uses 24h window

[github-actions]

Problem

scratchpad/metrics-glossary.md (line 283) documents the Daily Firewall Report's reporting period as "last 7 days", but the actual workflow operates on a 24-hour window. This glossary is used as the canonical cross-report metric-scope reference (e.g. by the Daily Regulatory Report Generator to validate cross-report consistency), so a stale entry here can cause other reports to misinterpret or misvalidate the firewall report's numbers.

Evidence

• scratchpad/metrics-glossary.md:283 states: - Daily Firewall Report (last 7 days).
• .github/workflows/daily-firewall-report.md:45 imports shared/aw-logs-24h-fetch.md.
• .github/workflows/daily-firewall-report.md:93,99 explicitly state: "the reporting period is the last 24 hours, matching the shared log-fetch component."
• Source: Regulatory Report discussion #56732, warning rejig docs #1.

Suggested action

Update scratchpad/metrics-glossary.md:283 to read "Daily Firewall Report (last 24 hours)" to match the workflow's actual, documented behavior. No workflow code change is needed — only the glossary entry is stale.

Acceptance criteria

• scratchpad/metrics-glossary.md line 283 correctly states a 24-hour window for the Daily Firewall Report.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• api.anthropic.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.anthropic.com"

See 网络 Configuration for more information.

Generated by 🔬 Deep Report · claude · agent · 258.7 AIC · ⌖ 8.26 AIC · ⊞ 12.4K · ◷

• expires on Aug 30, 2026, 10:49 PM UTC-08:00