Nightly Mutation Smoke #2

	name: Nightly Mutation Smoke

	# Roadmap A3: verify the P0 guard tests actually catch dangerous mutations on the
	# L3 permission/approval/resume boundary. Scoped + deterministic (see
	# scripts/run_mutation_smoke.py), so it runs nightly without taxing every PR.

	on:
	schedule:
	- cron: '0 5 * * *' # daily 05:00 UTC
	workflow_dispatch: # manual trigger

	permissions:
	contents: read

	jobs:
	mutation-smoke:
	runs-on: ubuntu-latest
	timeout-minutes: 15

	steps:
	- uses: actions/checkout@v6

	- name: Set up Python
	uses: actions/setup-python@v6
	with:
	python-version: "3.12"

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -e ".[dev]"

	- name: Mutation smoke on L3 trust modules
	run: python3 scripts/run_mutation_smoke.py

Provide feedback