From 0216d437e9b791e702e72fe976448324b564dfd3 Mon Sep 17 00:00:00 2001
From: Conal <33135619+Conalh@users.noreply.github.com>
Date: Thu, 21 May 2026 18:19:07 -0700
Subject: [PATCH] Guard committed Action bundle freshness

---
 .github/workflows/ci.yml | 3 +++
 test/workflow.test.mjs   | 1 +
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3016d72..3a11bf2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -24,4 +24,7 @@ jobs:
 
       - run: npm run build
 
+      - name: Verify committed Action bundle is current
+        run: git diff --exit-code -- dist
+
       - run: npm test
diff --git a/test/workflow.test.mjs b/test/workflow.test.mjs
index 4670761..048ab5f 100644
--- a/test/workflow.test.mjs
+++ b/test/workflow.test.mjs
@@ -78,6 +78,7 @@ test('CI workflow builds and tests PolicyMesh', async () => {
 
   assert.match(workflow, /npm ci/);
   assert.match(workflow, /npm run build/);
+  assert.match(workflow, /git diff --exit-code -- dist/);
   assert.match(workflow, /npm test/);
 });