Route four pinned Codex workflows with cost/economy model routing

.github/workflows/daily-cli-tools-tester.md

@@ -12,6 +12,7 @@ permissions:
   issues: read
   pull-requests: read
   actions: read
+  copilot-requests: write
 tools:
   cli-proxy: true
   agentic-workflows:
@@ -28,8 +29,10 @@ safe-outputs:
 timeout-minutes: 60
 engine:
   id: codex
-  model-provider: openai
-model: openai/gpt-6-astra
+  model-provider: github
+  model-routing:
+    goal: cost
+    mode: economy
 strict: true
 imports:
   - uses: shared/daily-audit-base.md

.github/workflows/daily-spending-forecast.md

@@ -13,7 +13,9 @@ permissions:
 engine:
   id: codex
   model-provider: github
-model: copilot/gpt-6.1-sol
+  model-routing:
+    goal: cost
+    mode: economy
 strict: true
 imports:
   - shared/trending-charts-simple.md

.github/workflows/issue-triage-agent.md

@@ -4,7 +4,9 @@ timeout-minutes: 5
 engine:
   id: codex
   model-provider: github
-model: copilot/gpt-6-sol
+  model-routing:
+    goal: cost
+    mode: economy
 strict: true
 on:
   schedule: "daily around 14:00 on weekdays"  # ~2 PM UTC, weekdays only

.github/workflows/schema-consistency-checker.md

@@ -9,10 +9,13 @@ permissions:
   discussions: read
   issues: read
   pull-requests: read
-model: openai/gpt-6.1-sol
+  copilot-requests: write
 engine:
   id: codex
-  model-provider: openai
+  model-provider: github
+  model-routing:
+    goal: cost
+    mode: economy
 max-ai-credits: 1500
 tools:
   cli-proxy: true

pkg/workflow/model_routing_native_test.go

@@ -332,6 +332,21 @@ func TestModelRoutingCopilotLocksUnchanged(t *testing.T) {
 		}
 	}
 	require.NotZero(t, routed, "no compiled lock has apiProxy.routing")
+
+	for name, provider := range map[string]string{
+		"daily-cli-tools-tester.lock.yml":     "",
+		"schema-consistency-checker.lock.yml": "",
+		"daily-spending-forecast.lock.yml":    "",
+		"issue-triage-agent.lock.yml":         "",
+	} {
+		t.Run(name, func(t *testing.T) {
+			content, err := os.ReadFile(filepath.Join("..", "..", ".github", "workflows", name))
+			require.NoError(t, err)
+			match := routedLockRoutingPattern.FindStringSubmatch(string(content))
+			require.NotNil(t, match, "%s lost model routing", name)
+			require.Equal(t, provider, match[2], "%s routing provider", name)
+		})
+	}
 }
 
 // TestNativeRoutingSmokeEvidence checks that the native routed smokes compile to native