BEFORE 1451e7cb23034d29774338608368a15d8845df36
AFTER  afe112ba8729a734a2fd9d4b4eba4bfe12f32646
PASS parsed workflow: only expected trigger change; one payload-only shell step; secret bindings and permissions retained
PASS fork regression: 6 action/draft fixtures; main 0 requests -> head 1 exact POST each; negative oracle fails on main
PASS negative header control: removing normalization is detected from captured request
PASS non-PR equivalence: all 7 existing push/issue/discussion cases have identical captured requests
PASS missing configuration: absent URL/auth/both skip successfully without curl or sleep on both versions
PASS retry equivalence: 9 cases; bounded three attempts; only curl 22 + HTTP 400 + main retries; sleep stub records 5s
PASS target PR retry: modeled default-branch GITHUB_REF retries HTTP 400 for main/release PR targets; actual GitHub ref policy not observed
PASS 53 Bash executions; captured request headers and base64 bodies saved in /tmp/pull-request-01/14481-proof/captures.json
LIMIT: GitHub dispatch/secrets are simulated; real Actions delivery and human trust-boundary approval remain outstanding.