Development record

external-review.yml suppresses zizmor dangerous-triggers on its pull_request_target trigger, so the safety invariant it states in prose (PR code never checked out) is unenforced; a later checkout added to that job passes every zizmor persona, a pwn request; add a Go test asserting no pull_request_target workflow checks out code