Morning QA report
Runs a set of read-only checks on your codebase each morning and files one report issue. It starts as an observer and only gets more power when you grant it.
What it does
- Runs the checks you list on a schedule
- Compares results with the last run
- Writes what broke or drifted in plain words
- Files one report issue for the day
Your approval boundaries
Creates draftsThese actions always wait for your yes:
- Editing any code
- Opening pull requests
- Closing or changing other issues
You decide what happens next.
More about this workflow
This setup is for developers and small engineering teams who want fewer chores. It takes a repeat chore off your plate and hands back something you can check quickly.
First, it runs the checks you list on a schedule. Next, it compares results with the last run. Then it writes what broke or drifted in plain words. Finally, it files one report issue for the day. It works with your git host, CI and monitoring, each on its own login with limited access.
You get the prep work done and waiting for you. The agent stops and asks for your yes before editing any code, opening pull requests and closing or changing other issues, and says plainly if a step cannot be undone.
“runs read-only morning checks and posts one report issue a day”
Explore required tools and model recommendations
Tools and access
GitHub
Handles the git host and ci part of this job. Grant a fine-grained token, read code and write comments.
API required: Yes. Needs a GitHub App or a fine-grained personal access token scoped to the repos it needs.
Sentry
Handles the monitoring part of this job. Grant read-only token.
API required: Yes. Needs an auth token from your Sentry account.
Official links only. Not sponsored, no affiliate links.
Model recommendations
Best pick
Claude Opus 5.5
Its maker points to it for long running coding work.
$4 per million input tokens, $20 per million output tokens.
Anthropic docs as of October 11, 2026
Cheaper backup
Claude Sonnet 5.5
Half the price per token and still strong for reviews and docs.
$2 per million input tokens, $10 per million output tokens.
Anthropic docs as of October 11, 2026
Our own picks. Not sponsored, no affiliate links.
Build your prompt
Add your details, then copy the prompt into your tool.
2Your prompt
4 of 4 still emptyYour answers stay in this browser only.
Run your workflow
Connect your tools with only the access this setup needs, then follow these steps.
Steps
Do these in order. Test on old data before it touches live work.
- 1Connect GitHub with its own login, not yours. Grant a fine-grained token, read code and write comments.
- 2Connect Sentry with its own login, not yours. Grant read-only token.
- 3Paste the prompt where your harness takes instructions. See the note under the Copy button.
- 4Do a dry run on old or test data first. Check every draft and every stop point by hand before you let it near live work.
- 5Read its log after the first real run. Only widen access once a week of runs looks clean.
Safeguards and trust score
The score describes this example setup’s access, approval boundaries, ability to undo changes, and scope.
Writes drafts and notes inside your tools, nothing leaves on its own.
Waits for a yes on: editing any code, opening pull requests, closing or changing other issues.
Proposes changes to live records, so the setup needs a change log and a way back.
Runs on its own login across 3 tools. Fewer connections means a smaller blast radius.
How to raise it
- Undo and logs: Stop it from editing live records. Have it write the change as a proposal you apply, and keep a log of every change with a way to roll it back +3
- Scope: Cut it down from 3 connected tools to the 2 it needs most, each with its own limited login instead of your full account +2
Do all of these to reach 89, up from 84.
Want help getting there? Get an AI Trust Audit from Pixeldesigns
Reviewed by Trustcase (example setup). How scoring works
Embed badge
Show this trust score on your site or README. It links back here.
[](https://trustcase.dev/use-cases/morning-qa-report)<a href="https://trustcase.dev/use-cases/morning-qa-report"><img src="https://trustcase.dev/badge/morning-qa-report.svg" alt="Trustcase trust score for Morning QA report" height="20"></a>More engineering workflows
- Upstream blocker recheck
Once a month, re-tests the upstream bugs and missing releases your work is waiting on. Tells you which ones have cleared.
- Daily public exploit digest
Each day it checks public exploit sources for high severity flaws that just got working exploit code. It keeps one running monthly list so you know what to patch first.
- Safe dependency update pull requests
Finds outdated packages on a schedule, applies only small updates that pass your tests, and opens a pull request. Major updates are listed for a person.
- Overnight safe task picker
Each night it looks over the day's unfinished work and picks 3 to 5 coding tasks that are safe to run overnight. It only writes a report with a ready prompt for each one.