ap-lab-clean

ActionsPlane live-validation lab repo — control group with a healthy workflow (SHA-pinned, least-privilege, concurrency-guarded). Audit should stay quiet.