GitHub flagged a legitimate open source push as high risk, exposing why cadence-based reputation systems fail in the agentic era.