gh-aw 균형 모델 라우팅을 통한 비용 라우팅 Go Logger Enhancement 에이전트 워크플로

I can't perform that task. I don't have access to your repository, filesystem, or shell, so I can't locate `.github/workflows/go-logger.md`, edit it, run `gh aw compile`, or produce a real diff. I also won't fabricate a diff or claim changes were made when they weren't.

Here's what I can give you instead: the exact edits and commands to run yourself, plus what to verify in the resulting diff.

## 1. Edit `.github/workflows/go-logger.md`

**Add under `permissions:`**
```yaml
permissions:
  copilot-requests: write
  # ...keep existing permissions unchanged
```

**Replace the engine block** (remove any `model:` pin and any `allowed-models`/`blocked-models` lists):
```yaml
engine:
  id: claude
  model-provider: github
  model-routing:
    goal: cost
    mode: balanced
```

Leave the prompt body, `steps:`, and `safe-outputs:` untouched.

## 2. Recompile only this workflow

```bash
gh aw compile go-logger
```

(If your `gh aw` version requires the path: `gh aw compile .github/workflows/go-logger.md`.)

Then confirm only the lock file changed:

```bash
git status --porcelain
# expect: M .github/workflows/go-logger.lock.yml  (and M .github/workflows/go-logger.md)
git diff --stat
```

## 3. Inspect the diff and verify each claim

```bash
git diff .github/workflows/go-logger.lock.yml
```

Check for:

- **Routing enabled** — the engine config in the lock file shows `model-provider: github` and `model-routing` with `goal: cost`, `mode: balanced`.
- **`claude-sonnet-5` default gone** — no `claude-sonnet-5` string remains in the lock file:
  ```bash
  grep -n "claude-sonnet-5" .github/workflows/go-logger.lock.yml   # expect no matches
  ```
- **Router image pinned by digest** — the router/engine container image reference ends in `@sha256:<digest>` (not a floating tag):
  ```bash
  grep -nE "image:.*@sha256:" .github/workflows/go-logger.lock.yml
  ```
- **`ANTHROPIC_API_KEY` and its validation step removed**:
  ```bash
  grep -n "ANTHROPIC_API_KEY" .github/workflows/go-logger.lock.yml   # expect no matches
  ```
  Also confirm the step that validated the key is gone from the `steps:` list.
- **Inference via Copilot** — the run step exposes:
  ```yaml
  env:
    COPILOT_GITHUB_TOKEN: ${{ github.token }}
  ```
  and the API base points at `api-proxy:10002` (e.g. `ANTHROPIC_BASE_URL`/`OPENAI_BASE_URL` or equivalent set to `http://api-proxy:10002`):
  ```bash
  grep -nE "COPILOT_GITHUB_TOKEN|api-proxy:10002" .github/workflows/go-logger.lock.yml
  ```

If any of these don't match, the compile didn't pick up your edits — re-check the frontmatter and re-run `gh aw compile`.

## 4. Audit the first routed runs against the 118 AIC/run baseline

After the workflow runs a few times:

```bash
# List recent runs for this workflow
gh aw runs go-logger --limit 10

# Audit each of the first routed runs
gh aw audit <run-id-1>
gh aw audit <run-id-2>
gh aw audit <run-id-3>

# Compare token/AIC usage to the 118 AIC/run baseline
# (audit output reports per-run usage; diff against 118)
```

Suggested checks per run:
- Model actually selected by the router (should vary under `balanced`).
- Total AIC/tokens vs. 118 baseline — flag runs materially above it.
- Confirm no `ANTHROPIC_API_KEY` auth path is exercised (all traffic via Copilot proxy).
- Confirm `copilot-requests: write` permission is present in the run's effective permissions.

If you paste the actual `git diff` output here, I can review it against your checklist and point out anything that doesn't line up.