Remove staged mode

.github/scripts/pages-report/aic-usage.mjs

@@ -82,13 +82,13 @@ async function mapWithConcurrency(values, concurrency, mapper) {
           const aic = Number(run.aic);
           if (!Number.isFinite(runId) || !Number.isFinite(aic)) continue;
           const metadata = workflowByRun.get(`${repository}:${runId}`);
-          const mode = metadata?.run?.displayTitle?.match(/(?:^|\s[·|:-]\s)(preview|staged|review|live)$/i)?.[1]?.toLowerCase() || null;
+          const mode = metadata?.run?.displayTitle?.match(/(?:^|\s[·|:-]\s)(review|live)$/i)?.[1]?.toLowerCase() || null;
           runs.set(`${repository}:${runId}`, {
             repository,
             runId,
             workflowName: run.workflow_name || run.workflow || metadata?.workflow?.name || null,
             workflowPath: metadata?.workflow?.path || null,
-            mode: mode === "preview" ? "staged" : mode,
+            mode,
             conclusion: metadata?.run?.conclusion || null,
             createdAt: run.created_at || run.started_at || metadata?.run?.createdAt || null,
             aic,

.github/scripts/pages-report/report.mjs

@@ -487,8 +487,8 @@ function repositoryWorkflowTabs(repositoryName, workflow, selectedView) {
 }
 
 function configuredModeFor(bundle) {
-  const mode = repositoryVariables.get(bundle.rolloutModeVariable) || "staged";
-  return normalizeMode(mode) === "unknown" ? "staged" : normalizeMode(mode);
+  const mode = repositoryVariables.get(bundle.rolloutModeVariable) || "review";
+  return normalizeMode(mode) === "unknown" ? "review" : normalizeMode(mode);
 }
 
 function repositoryVariablesFromEnvironment() {
@@ -506,7 +506,7 @@ function repositoryVariablesFromEnvironment() {
 }
 
 function modeIndicator(mode) {
-  const icons = { staged: "eye", review: "beaker", live: "rocket" };
+  const icons = { review: "beaker", live: "rocket" };
   const label = `${mode[0].toUpperCase()}${mode.slice(1)}`;
   return `<span class="mode-indicator mode-${mode}" title="Configured mode: ${label}">${octicon(icons[mode])}<span>${label}</span></span>`;
 }
@@ -625,8 +625,7 @@ const repositoryVariables = new Map([
 const issueByUrl = new Map(reportSources.flatMap((source) => source.issues.map((issue) => [issue.url, issue])));
 const runCache = new Map();
 function normalizeMode(mode) {
-  if (mode === "preview") return "staged";
-  return ["staged", "review", "live"].includes(mode) ? mode : "unknown";
+  return ["review", "live"].includes(mode) ? mode : "unknown";
 }
 
 async function metadataFromRunUrl(runUrl) {
@@ -638,7 +637,7 @@ async function metadataFromRunUrl(runUrl) {
     runCache.set(cacheKey, githubOptional(`/repos/${runOwner}/${runRepository}/actions/runs/${runId}`, null));
   }
   const run = await runCache.get(cacheKey);
-  const mode = run?.display_title?.match(/(?:^|\s[·|:-]\s)(preview|staged|review|live)$/i)?.[1]?.toLowerCase();
+  const mode = run?.display_title?.match(/(?:^|\s[·|:-]\s)(review|live)$/i)?.[1]?.toLowerCase();
   const workflowPath = run?.path || "";
   return {
     mode: normalizeMode(mode),
@@ -689,7 +688,7 @@ const records = (await Promise.all(discoveredRecords.map(async (record) => {
 const scopedRecords = allowedRepositories.size === 0
   ? records
   : records.filter((record) => allowedRepositories.has(record.repository.toLowerCase()));
-const reportRecords = scopedRecords.filter((record) => ["staged", "review", "live"].includes(record.mode));
+const reportRecords = scopedRecords.filter((record) => ["review", "live"].includes(record.mode));
 
 await mkdir(outputDirectory, { recursive: true });
 await writeFile(path.join(outputDirectory, "inventory.json"), `${JSON.stringify(inventory, null, 2)}\n`);
@@ -2093,7 +2092,6 @@ tbody tr:hover { background: var(--canvas-subtle); }
 .status-muted { background: var(--neutral-muted); }
 .mode-live { border-color: color-mix(in srgb, var(--success) 45%, var(--border)); background: var(--success-muted); color: var(--success); }
 .mode-review { border-color: color-mix(in srgb, var(--attention) 45%, var(--border)); background: var(--attention-muted); color: var(--attention); }
-.mode-staged { background: var(--neutral-muted); }
 .mode-indicator { min-height: 22px; display: inline-flex; flex: none; align-items: center; gap: 5px; padding: 1px 7px; border: 1px solid var(--border); border-radius: 2em; font-size: .6875rem; font-weight: 600; text-transform: none; white-space: nowrap; }
 .mode-indicator .octicon { width: 13px; height: 13px; flex-basis: 13px; }
 .sidebar-nav .mode-indicator { margin-left: auto; }

.github/skills/create-ops-package/SKILL.md

@@ -32,9 +32,9 @@ Create `.github/workflows/<package>.md` with:
 
 - `name` set to the exact package display name, with no `/` suffix, and a run name that includes target and safe-output mode
 - a schedule when the operation is periodic, plus `workflow_dispatch`
-- the standard dispatch inputs: `target_repo`, `safe_output_repo`, `max_repos`, and `safe_output_mode` with `staged`, `review`, and `live` choices
+- the standard dispatch inputs: `target_repo`, `safe_output_repo`, `max_repos`, and `safe_output_mode` with `review` and `live` choices, defaulting to `review`
 - `shared/control.md` imported with `role: orchestrator`
-- package-scoped rollout variables named `CENTRAL_AGENTIC_OPS_<PACKAGE>_MODE` and `CENTRAL_AGENTIC_OPS_<PACKAGE>_ROLLOUT_PERCENT`, defaulting to `staged` and `100`; shared control routes review safe outputs to a manual `safe_output_repo` override or `github.repository`
+- package-scoped variables named `CENTRAL_AGENTIC_OPS_<PACKAGE>_ENABLED`, `CENTRAL_AGENTIC_OPS_<PACKAGE>_MODE`, and `CENTRAL_AGENTIC_OPS_<PACKAGE>_ROLLOUT_PERCENT`, defaulting to `true`, `review`, and `100`; shared control routes review safe outputs to a manual `safe_output_repo` override or `github.repository`
 - least-privilege permissions, explicit tools/network configuration, `strict: true`, and a bounded `max-ai-credits`
 - `safe-outputs.dispatch-workflow.workflows` listing every worker slug and a `max` consistent with `max_repos` and worker count
 - a prompt headed with the package display name and containing `Discovery`, `Workers`, and `Completion` sections
@@ -58,7 +58,7 @@ The orchestrator's `Completion` section must:
 Create at least one `.github/workflows/<package>-<worker>.md`. Every worker must include:
 
 - `name` set to the exact `<Package Name> / <Worker Name>` hierarchy, where `<Package Name>` exactly matches the orchestrator's `name`
-- `workflow_dispatch` with the full control-plane envelope: `target_repo`, `safe_output_repo`, `safe_output_mode`, `preview_only`, `correlation_id`, `central_repo`, `control_plane_run_url`, and `batch_label`
+- `workflow_dispatch` with the full control-plane envelope: `target_repo`, `safe_output_repo`, `safe_output_mode`, `correlation_id`, `central_repo`, `control_plane_run_url`, and `batch_label`
 - required `target_repo` and `safe_output_repo` string inputs
 - `shared/control.md` imported with `role: worker`
 - a stable `tracker-id` equal to its filename stem
@@ -112,7 +112,7 @@ Before finishing:
 2. Confirm the orchestrator `name` is exactly `<Package Name>` and every worker `name` is exactly `<Package Name> / <Worker Name>`.
 3. Confirm the orchestrator dispatch list exactly matches the new worker stems.
 4. Confirm each worker accepts the complete standard envelope and imports `shared/control.md` as `worker`.
-5. Confirm the orchestrator imports `shared/control.md` as `orchestrator`, uses package-scoped rollout variables, and defaults safely to staged mode.
+5. Confirm the orchestrator imports `shared/control.md` as `orchestrator`, uses package-scoped mode and enablement variables, and defaults safely to review mode.
 6. Confirm the orchestrator has a `Completion` section that preserves the exact standard report contract from `shared/control.md`; package-specific reporting must be additive.
 7. Confirm worker concurrency is keyed by `github.workflow` and `inputs.target_repo` with stale runs cancelled.
 8. Check permissions, tools, network hosts, safe-output limits, credits, timeouts, and dispatch maximums against actual need.

.github/workflows/advisory-package-maintainer.md

@@ -10,10 +10,10 @@ on:
   workflow_dispatch:
     inputs:
       safe_output_mode:
-        default: staged
+        default: review
         type: choice
         options:
-          - staged
+          - review
           - live
 
 checkout:
@@ -40,7 +40,7 @@ network:
     - github
     - www.gov.uk
 
-run-name: "Advisory package alignment maintenance · ${{ inputs.safe_output_mode || 'live' }}"
+run-name: "Advisory package alignment maintenance · ${{ inputs.safe_output_mode || 'review' }}"
 
 concurrency:
   group: "${{ github.workflow }}"
@@ -56,7 +56,6 @@ tools:
   web-fetch:
 
 safe-outputs:
-  staged: ${{ github.event_name == 'workflow_dispatch' && inputs.safe_output_mode != 'live' }}
   create-pull-request:
     title-prefix: "[advisory:implementation-status] "
     draft: true

.github/workflows/advisory-uk-ai-operational-resilience.md

@@ -15,9 +15,6 @@ on:
         type: string
       safe_output_mode:
         type: string
-      preview_only:
-        default: "true"
-        type: string
       correlation_id:
         type: string
       central_repo:
@@ -28,7 +25,7 @@ on:
         type: string
 
 checkout:
-  - repository: ${{ inputs.safe_output_repo }}
+  - repository: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
     github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
     fetch-depth: 0
     fetch: ["*"]
@@ -38,13 +35,18 @@ checkout:
     path: target
 
 env:
+  CENTRAL_AGENTIC_OPS_PACKAGE_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_ENABLED || 'true' }}
   CENTRAL_AGENTIC_OPS_WORKER_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_UK_AI_OPERATIONAL_RESILIENCE_ENABLED || 'true' }}
-  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_UK_AI_OPERATIONAL_RESILIENCE_MAX_MODE || 'staged' }}
-  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'staged' }}
+  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_UK_AI_OPERATIONAL_RESILIENCE_MAX_MODE || 'review' }}
+  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'review' }}
   REVIEW_OUTPUT_REPO: ${{ inputs.safe_output_repo || github.repository }}
-  SAFE_OUTPUT_REPO: ${{ inputs.safe_output_mode == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
+  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
   TARGET_REPO: ${{ inputs.target_repo || '' }}
 
+if: >-
+  (vars.CENTRAL_AGENTIC_OPS_ADVISORY_ENABLED || 'true') == 'true' &&
+  (vars.CENTRAL_AGENTIC_OPS_ADVISORY_UK_AI_OPERATIONAL_RESILIENCE_ENABLED || 'true') == 'true'
+
 imports:
   - uses: shared/control.md
     with:
@@ -73,7 +75,7 @@ network:
     - github
     - www.gov.uk
 
-run-name: "UK AI operational resilience advisory · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || (inputs.preview_only == 'true' && 'staged' || 'live') }}"
+run-name: "UK AI operational resilience advisory · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || 'review' }}"
 
 concurrency:
   group: "${{ github.workflow }}-${{ inputs.target_repo }}"
@@ -89,13 +91,12 @@ tools:
   web-fetch:
 
 safe-outputs:
-  staged: ${{ inputs.preview_only == 'true' }}
   create-issue:
     expires: 30d
     title-prefix: "[advisory:uk-ai-resilience] "
     close-older-issues: true
     max: 1
-    target-repo: ${{ github.event.inputs.safe_output_repo }}
+    target-repo: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
   noop:
 
 timeout-minutes: 30

.github/workflows/advisory.md

@@ -1,7 +1,7 @@
 ---
 name: "Advisory"
 
-run-name: "Advisory · ${{ inputs.target_repo || 'auto' }} · ${{ inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'staged' }}"
+run-name: "Advisory · ${{ inputs.target_repo || 'auto' }} · ${{ inputs.safe_output_mode || 'mode' }}"
 
 max-ai-credits: 250
 timeout-minutes: 15
@@ -37,20 +37,22 @@ on:
         default: 0
         type: number
       safe_output_mode:
-        default: "staged"
+        default: "review"
         type: choice
         options:
-          - staged
           - review
           - live
 
 env:
-  CENTRAL_AGENTIC_OPS_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'staged' }}
-  GH_AW_SAFE_OUTPUT_MODE: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'staged') == 'preview' && 'staged' || (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'staged') }}
+  CENTRAL_AGENTIC_OPS_PACKAGE_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_ENABLED || 'true' }}
+  CENTRAL_AGENTIC_OPS_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'review' }}
+  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'review' }}
   REVIEW_OUTPUT_REPO: ${{ inputs.safe_output_repo || github.repository }}
-  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'staged') == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
+  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_ADVISORY_MODE || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
   TARGET_REPO: ${{ inputs.target_repo || '' }}
 
+if: (vars.CENTRAL_AGENTIC_OPS_ADVISORY_ENABLED || 'true') == 'true'
+
 imports:
   - uses: shared/control.md
     with:

.github/workflows/ambient-context-agents-md-curator.md

@@ -18,9 +18,6 @@ on:
         type: string
       safe_output_mode:
         type: string
-      preview_only:
-        default: "true"
-        type: string
       correlation_id:
         type: string
       central_repo:
@@ -31,7 +28,7 @@ on:
         type: string
 
 checkout:
-  - repository: ${{ inputs.safe_output_repo }}
+  - repository: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
     github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
     current: true
   - repository: ${{ inputs.target_repo }}
@@ -40,13 +37,18 @@ checkout:
     fetch-depth: 0
 
 env:
+  CENTRAL_AGENTIC_OPS_PACKAGE_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true' }}
   CENTRAL_AGENTIC_OPS_WORKER_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_AGENTS_MD_ENABLED || 'true' }}
-  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_AGENTS_MD_MAX_MODE || 'staged' }}
-  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'staged' }}
+  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_AGENTS_MD_MAX_MODE || 'review' }}
+  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'review' }}
   REVIEW_OUTPUT_REPO: ${{ inputs.safe_output_repo || github.repository }}
-  SAFE_OUTPUT_REPO: ${{ inputs.safe_output_mode == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
+  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
   TARGET_REPO: ${{ inputs.target_repo || '' }}
 
+if: >-
+  (vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true') == 'true' &&
+  (vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_AGENTS_MD_ENABLED || 'true') == 'true'
+
 imports:
   - uses: shared/control.md
     with:
@@ -68,7 +70,7 @@ network:
     - defaults
     - github
 
-run-name: "Ambient context AGENTS.md · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || (inputs.preview_only == 'true' && 'staged' || 'live') }}"
+run-name: "Ambient context AGENTS.md · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || 'review' }}"
 
 concurrency:
   group: "${{ github.workflow }}-${{ inputs.target_repo }}"
@@ -100,13 +102,12 @@ tools:
     - "find"
 
 safe-outputs:
-  staged: ${{ inputs.preview_only == 'true' }}
   create-issue:
     expires: 30d
     title-prefix: "[ambient-context:agents-md] "
     close-older-issues: true
     max: 1
-    target-repo: ${{ github.event.inputs.safe_output_repo }}
+    target-repo: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
 
 timeout-minutes: 25
 

.github/workflows/ambient-context-skills-curator.md

@@ -18,9 +18,6 @@ on:
         type: string
       safe_output_mode:
         type: string
-      preview_only:
-        default: "true"
-        type: string
       correlation_id:
         type: string
       central_repo:
@@ -31,7 +28,7 @@ on:
         type: string
 
 checkout:
-  - repository: ${{ inputs.safe_output_repo }}
+  - repository: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
     github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
     current: true
   - repository: ${{ inputs.target_repo }}
@@ -40,13 +37,18 @@ checkout:
     fetch-depth: 0
 
 env:
+  CENTRAL_AGENTIC_OPS_PACKAGE_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true' }}
   CENTRAL_AGENTIC_OPS_WORKER_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_SKILLS_ENABLED || 'true' }}
-  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_SKILLS_MAX_MODE || 'staged' }}
-  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'staged' }}
+  CENTRAL_AGENTIC_OPS_WORKER_MAX_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_SKILLS_MAX_MODE || 'review' }}
+  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || 'review' }}
   REVIEW_OUTPUT_REPO: ${{ inputs.safe_output_repo || github.repository }}
-  SAFE_OUTPUT_REPO: ${{ inputs.safe_output_mode == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
+  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
   TARGET_REPO: ${{ inputs.target_repo || '' }}
 
+if: >-
+  (vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true') == 'true' &&
+  (vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_SKILLS_ENABLED || 'true') == 'true'
+
 imports:
   - uses: shared/control.md
     with:
@@ -67,7 +69,7 @@ network:
     - defaults
     - github
 
-run-name: "Ambient context skills · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || (inputs.preview_only == 'true' && 'staged' || 'live') }}"
+run-name: "Ambient context skills · ${{ inputs.target_repo }} · ${{ inputs.safe_output_mode || 'review' }}"
 
 concurrency:
   group: "${{ github.workflow }}-${{ inputs.target_repo }}"
@@ -95,13 +97,12 @@ tools:
     - "find"
 
 safe-outputs:
-  staged: ${{ inputs.preview_only == 'true' }}
   create-issue:
     expires: 30d
     title-prefix: "[ambient-context:skills] "
     close-older-issues: true
     max: 1
-    target-repo: ${{ github.event.inputs.safe_output_repo }}
+    target-repo: ${{ (inputs.safe_output_mode || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || inputs.target_repo }}
 
 timeout-minutes: 20
 

.github/workflows/ambient-context.md

@@ -37,20 +37,22 @@ on:
         default: 0
         type: number
       safe_output_mode:
-        default: "staged"
+        default: "review"
         type: choice
         options:
-          - staged
           - review
           - live
 
 env:
-  CENTRAL_AGENTIC_OPS_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'staged' }}
-  GH_AW_SAFE_OUTPUT_MODE: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'staged') == 'preview' && 'staged' || (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'staged') }}
+  CENTRAL_AGENTIC_OPS_PACKAGE_ENABLED: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true' }}
+  CENTRAL_AGENTIC_OPS_MODE: ${{ vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'review' }}
+  GH_AW_SAFE_OUTPUT_MODE: ${{ inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'review' }}
   REVIEW_OUTPUT_REPO: ${{ inputs.safe_output_repo || github.repository }}
-  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'staged') == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
+  SAFE_OUTPUT_REPO: ${{ (inputs.safe_output_mode || vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_MODE || 'review') == 'review' && (inputs.safe_output_repo || github.repository) || '' }}
   TARGET_REPO: ${{ inputs.target_repo || '' }}
 
+if: (vars.CENTRAL_AGENTIC_OPS_AMBIENT_CONTEXT_ENABLED || 'true') == 'true'
+
 imports:
   - uses: shared/control.md
     with: