# Root CI babysitting

Fix the permitted external action, target SHA/ref, and approval boundary. Delegate polling and evidence collection to Worker/operations; decide whether any required repair changes scope.