chore(routines): daily-upstream-check 2026-08-02 — push access blocked

[NativeTeachingAidsB]

Daily Upstream Check — 2026-08-02 Blocked

The daily-upstream-check routine ran successfully on 2026-08-02 but could not push results because the session's credentials lack write access to this repository.

What ran OK:

• Fetched latest versions for 8 of 15 sources (first run — baseline established locally)
• Created docs/upstream-log/state.json and docs/upstream-log/2026-08.md locally
• Committed to branch chore/routines-daily-2026-08-02 in the local checkout

What blocked:

• git push origin chore/routines-daily-2026-08-02 → 403 ("Permission denied to NativeTeachingAidsB")
• GitHub MCP create_branch → 403 ("Resource not accessible by integration")
• Neither the git proxy credentials nor the GitHub MCP token have write access

Fetch failures (separate from push blocker):

• cursor, cline, continue, windsurf — proxy policy blocks cursor.com, marketplace.visualstudio.com, windsurf.com
• zed, mcp-spec, claude-plugins-official — GitHub API session scope restricted to opencircuitdev/codetalker only

Versions fetched (for reference):

Source	Version
claude-code-cli	2.1.220
claude-agent-sdk	0.3.220
claude-agent-sdk-py	0.2.128
codex-cli	0.146.0
aider	0.86.2
goose	0.1.0
mcp-python	2.0.0
mcp-ts	1.30.0

Required fixes:

1. Grant the routine's session token write access to this repo (or configure a deploy key)
2. Add cursor.com, marketplace.visualstudio.com, windsurf.com to the network egress allowlist — OR update the routine spec to use alternate endpoints for those sources
3. Extend GitHub API session scope to include zed-industries/zed, modelcontextprotocol/specification, anthropics/claude-plugins-official (read-only) — OR update the routine spec to use alternate endpoints