TEST 100

TEST-100

Stimulus

Reference the environment secret from a fixture job before approval. List the requester identity's permissions on each action-class target, list the repository and organization secrets available to the gate workflow, and review each action class that runs on a self-hosted runner.

Required observation

The secret is unavailable before approval. The requester identity has no write permission on any target. No available secret grants an action-class capability. Each self-hosted action class documents the non-isolation caveat.