Target

Correct selection

apply_auto.if

${{ needs.plan.outputs.risk == ' low ' }}

The automatic execution job must explicitly require the low-risk classification. The expression ${{ needs.plan.outputs.risk == ' low ' }} reads the risk value published by the prerequisite plan job and permits automatic application only when that value matches low. Medium-risk and high-risk plans therefore cannot enter this automatic execution path.

The complementary reviewed path should handle non-low classifications and reference an environment configured with required reviewers. The condition routes work according to risk; the environment protection rule supplies the actual approval barrier. Merely naming a job “manual” or displaying an approval message does not require human authorization.

The alternatives always(), success(), and failure() describe execution status rather than the plan’s risk classification. Checking only for medium would also fail to cover high-risk changes. The plan-producing job must publish the risk as an output, and each execution job must obtain the corresponding plan artifact before applying it.

This design applies human intervention where the task’s operational impact warrants it while allowing routine low-risk work to proceed automatically.

Relevant curriculum topics are risk-based autonomy, explicit authorization, and controlled execution paths.