diff --git a/.github/workflows/plumbing-test.yml b/.github/workflows/plumbing-test.yml
index 3f73922..3d52fe9 100644
--- a/.github/workflows/plumbing-test.yml
+++ b/.github/workflows/plumbing-test.yml
@@ -34,17 +34,20 @@ jobs:
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           prompt: |
-            This is a plumbing probe. Do exactly this and nothing else:
+            This is a plumbing probe. Run EXACTLY these commands, verbatim, in
+            order — do not substitute flags or add commands:
             1. git checkout -b plumbing-probe-${{ github.run_id }}
-            2. Write one file at the repo root named probe.txt containing:
+            2. Write a file at the repo root named probe.txt containing exactly:
                plumbing probe run ${{ github.run_id }}
-            3. Commit it and push the branch.
-            4. Open a PR with gh pr create, titled
-               "plumbing probe ${{ github.run_id }} - close without merging".
-            Do not touch any other file. Report each command's result.
+            3. git add probe.txt
+            4. git commit -m "plumbing probe ${{ github.run_id }}"
+            5. git push -u origin plumbing-probe-${{ github.run_id }}
+            6. gh pr create --title "plumbing probe ${{ github.run_id }} - close without merging" --body "Probe artifact. Close without merging."
+            Report each command's output. If a command is denied, say which one
+            and stop.
           claude_args: >-
             --max-turns 15
-            --allowedTools "Write,Bash(git checkout:*),Bash(git add:*),Bash(git commit:*),Bash(git push origin plumbing-probe:*),Bash(git push -u origin plumbing-probe:*),Bash(gh pr create:*)"
+            --allowedTools "Write,Bash(git checkout -b plumbing-probe-:*),Bash(git add probe.txt),Bash(git commit -m:*),Bash(git push -u origin plumbing-probe-:*),Bash(gh pr create --title:*),Bash(git status:*),Bash(git branch:*)"
 
       - name: Assert the probe PR exists (loud failure, never silent)
         env: