From 98540c8a12722aaa005102518746916018107ccb Mon Sep 17 00:00:00 2001
From: morluto <76467478+morluto@users.noreply.github.com>
Date: Thu, 16 Jul 2026 23:23:40 +0000
Subject: [PATCH] test(ci): guard Windows Ghidra workflow isolation

---
 tests/realGhidraWindowsWorkflow.test.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tests/realGhidraWindowsWorkflow.test.ts b/tests/realGhidraWindowsWorkflow.test.ts
index 6aca5b5de..ec1574598 100644
--- a/tests/realGhidraWindowsWorkflow.test.ts
+++ b/tests/realGhidraWindowsWorkflow.test.ts
@@ -20,7 +20,9 @@ describe("real Windows Ghidra workflow trust boundary", () => {
     expect(workflow).not.toMatch(
       /\$\{\{\s*(?:inputs|github\.event\.(?:inputs|client_payload))\b/u,
     );
+    expect(workflow).toContain("REA_ANALYSIS_PROVIDER: ghidra");
     expect(workflow).not.toContain("cache: npm");
+    expect(workflow).not.toContain("npm run rebuild:native");
     expect(workflow).toContain("npm run verify:ghidra:windows");
     expect(workflow).toContain("windows-ghidra-proof.log");
   });