## Background Workflow permissions should be minimal. ## Why it matters AGENT.md requires least privilege. ## Acceptance criteria - [ ] Audit all `permissions:` blocks are minimal. - [ ] Fix any over-broad grants. ## Where to look - `.github/workflows/` ## How to claim Comment `/claim` on this issue.
Background
Workflow permissions should be minimal.
Why it matters
AGENT.md requires least privilege.
Acceptance criteria
permissions:blocks are minimal.Where to look
.github/workflows/How to claim
Comment
/claimon this issue.