From 1a7b6d2ec2e9d719a49780eee5fa554aa26ca3c8 Mon Sep 17 00:00:00 2001
From: Param Harrison <paramanantham@live.com>
Date: Sun, 1 Nov 2026 14:31:19 +0200
Subject: [PATCH 1/2] diag: one-off key check (branch only, never merged)

---
 .github/workflows/diag.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .github/workflows/diag.yml

diff --git a/.github/workflows/diag.yml b/.github/workflows/diag.yml
new file mode 100644
index 0000000..39f087d
--- /dev/null
+++ b/.github/workflows/diag.yml
@@ -0,0 +1,20 @@
+name: diag
+on:
+  push:
+    branches: [ci/diag]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  diag:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v4
+      - uses: anthropics/claude-code-action@d70510b174a1244958df0b03166a54912811f3e6 # v1
+        with:
+          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          prompt: Reply with the single word ok.
+          show_full_output: true
+          claude_args: --model claude-sonnet-5-5 --max-turns 2

From f9b431b611350a3fed5ad14a45192eaeb4e9811a Mon Sep 17 00:00:00 2001
From: Param Harrison <paramanantham@live.com>
Date: Sun, 1 Nov 2026 14:34:27 +0200
Subject: [PATCH 2/2] diag: run on pull_request

---
 .github/workflows/diag.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/diag.yml b/.github/workflows/diag.yml
index 39f087d..38b3669 100644
--- a/.github/workflows/diag.yml
+++ b/.github/workflows/diag.yml
@@ -1,7 +1,6 @@
 name: diag
 on:
-  push:
-    branches: [ci/diag]
+  pull_request:
 permissions:
   contents: read
   pull-requests: write