name: Manual CI demonstration

on:
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: lariza-actions-demo
  cancel-in-progress: false

jobs:
  policy-check:
    runs-on: lariza-test
    timeout-minutes: 5
    steps:
      - uses: actions/checkout@v4
      - name: Validate safe demonstration files
        shell: sh
        run: ./scripts/check.sh
      - name: Show non-secret runner context
        shell: sh
        run: |
          printf 'repository=%s\n' "$GITHUB_REPOSITORY"
          printf 'sha=%s\n' "$GITHUB_SHA"
          printf 'This workflow performs no deployment or external mutation.\n'