Outcome

• Moved the guarded Google Ads preflight workflow into the GitHub-backed repo path and verified it from GitHub Actions.
• Repo: C:\Users\SAguiar\Documents\Projects\google-ads-cloud-runner
• Remote: https://github.com/samaguiar1982-cpu/google-ads-cloud-runner
• Commit pushed: 0c9e51f (Add guarded OAuth diagnostics preflight path)
• GitHub Actions run: https://github.com/samaguiar1982-cpu/google-ads-cloud-runner/actions/runs/25670689167

Cloud Run Result

• Workflow status: success
• oauth-diagnostics: OK
• preflight: PREFLIGHT=BLOCKED_PRIMARY (guarded success state; access remediation still required)
• Non-protected manager customers: 3681763507, 5397696821
• Non-protected non-manager customers: none visible
• Non-LSA Search client metric-capable account: none visible
• Classification error: 7271453972 => CUSTOMER_NOT_ENABLED

Artifacts

• Local diagnostics: C:\Users\SAguiar\Documents\Codex\google-ads\2026-05-11_083928_198753-oauth-diagnostics
• Local preflight: C:\Users\SAguiar\Documents\Codex\google-ads\2026-05-11_083931_205900-preflight
• Downloaded GitHub artifact root: C:\Users\SAguiar\Documents\Codex\google-ads\github-artifacts\25670689167

Guardrails

• No live Google Ads changes were made.