diff --git a/.github/workflows/daily-vulnhunter-scan.lock.yml b/.github/workflows/daily-vulnhunter-scan.lock.yml
index dbc86f03cf0..d874e32b480 100644
--- a/.github/workflows/daily-vulnhunter-scan.lock.yml
+++ b/.github/workflows/daily-vulnhunter-scan.lock.yml
@@ -1,4 +1,4 @@
-# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"0bb7f120d35fc9261dd9846598ab00710bb7582a6d772adfc6754534cc33d253","body_hash":"8c267158549367088f1bf50675d1397343bfcc6c610c6a6c7bcf51c3a0281749","strict":true,"agent_id":"claude","agent_model":"claude-sonnet-4.6","engine_versions":{"claude":"2.1.223"}}
+# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"c22635b1d4d54b40d2d583cce86ea67ca0e0fc20ab0df23ce894d0d303d2556a","body_hash":"8c267158549367088f1bf50675d1397343bfcc6c610c6a6c7bcf51c3a0281749","strict":true,"agent_id":"claude","agent_model":"claude-sonnet-4.6","engine_versions":{"claude":"2.1.223"}}
 # gh-aw-manifest: {"version":1,"secrets":["ANTHROPIC_API_KEY","COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/cache/save","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/checkout","sha":"3d3c42e5aac5ba805825da76410c181273ba90b1","version":"v7.0.1"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/setup-node","sha":"820762786026740c76f36085b0efc47a31fe5020","version":"v7.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.44","digest":"sha256:0d727725c737b58c7bdf51f640cffb928385ec46517e0917c7f1a02f1bada8b4","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.44@sha256:0d727725c737b58c7bdf51f640cffb928385ec46517e0917c7f1a02f1bada8b4"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.44","digest":"sha256:b50fbadba138f6e9aba94aca09711335c489bb3b15861220cb66f6092e042dc7","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.44@sha256:b50fbadba138f6e9aba94aca09711335c489bb3b15861220cb66f6092e042dc7"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.44","digest":"sha256:83e48bbe12c634be8c228a576832fe45f66c529ac3659db92bddbcf2eeb6d627","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.44@sha256:83e48bbe12c634be8c228a576832fe45f66c529ac3659db92bddbcf2eeb6d627"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.4.8","digest":"sha256:38bbea36cdb46a3c9d04d1db05e672966f5239b431a2022eb35881688e5721d8","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.4.8@sha256:38bbea36cdb46a3c9d04d1db05e672966f5239b431a2022eb35881688e5721d8"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:0d9f1fb5fd6610c0ac1f5194a38e45a8a1e81f8a390d5142d8e4e6f26a4b3196","pinned_image":"ghcr.io/github/gh-aw-node@sha256:0d9f1fb5fd6610c0ac1f5194a38e45a8a1e81f8a390d5142d8e4e6f26a4b3196"},{"image":"ghcr.io/github/github-mcp-server:v1.8.0","digest":"sha256:d5a18c04b92714c309eb46a2305087e91a4dbd80420f6e462656699f95093520","pinned_image":"ghcr.io/github/github-mcp-server:v1.8.0@sha256:d5a18c04b92714c309eb46a2305087e91a4dbd80420f6e462656699f95093520"}]}
 # This file was automatically generated by gh-aw. DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
 #
@@ -2084,7 +2084,7 @@ jobs:
           HITS="$RUNNER_TEMP/vulnhunter-hits.tsv"
           : > "$HITS"
           add_hits() {
-            (cd "$REPO_ROOT" && grep -rlE "$2" . 2>/dev/null || true) \
+            (cd "$REPO_ROOT" || exit 0; grep -rlE "$2" . 2>/dev/null || true) \
               | sed 's|^\./||' \
               | awk -v w="$1" '{print w"\t"$0}' >> "$HITS"
           }
diff --git a/.github/workflows/daily-vulnhunter-scan.md b/.github/workflows/daily-vulnhunter-scan.md
index 5381ce0f088..c8011165e9e 100644
--- a/.github/workflows/daily-vulnhunter-scan.md
+++ b/.github/workflows/daily-vulnhunter-scan.md
@@ -59,7 +59,7 @@ jobs:
           HITS="$RUNNER_TEMP/vulnhunter-hits.tsv"
           : > "$HITS"
           add_hits() {
-            (cd "$REPO_ROOT" && grep -rlE "$2" . 2>/dev/null || true) \
+            (cd "$REPO_ROOT" || exit 0; grep -rlE "$2" . 2>/dev/null || true) \
               | sed 's|^\./||' \
               | awk -v w="$1" '{print w"\t"$0}' >> "$HITS"
           }
diff --git a/.poutine.yml b/.poutine.yml
index af33c17f549..6817a37a957 100644
--- a/.poutine.yml
+++ b/.poutine.yml
@@ -6,3 +6,16 @@ rulesConfig:
   pr_runs_on_self_hosted:
     allowed_runners:
       - ubuntu-slim  # GitHub's new built-in runner (not self-hosted)
+
+# Acknowledge findings that are not relevant in this repository.
+# Note: poutine has no inline `# poutine:ignore` comment mechanism; the `skip`
+# section below is the only supported suppression mechanism.
+skip:
+  # The reusable workflow_call smoke tests check out a caller-supplied ref and then
+  # run shell scripts staged under ${RUNNER_TEMP}/gh-aw/actions. Those scripts are
+  # emitted by the compiler into the lock file itself, not read from the checked-out
+  # (potentially untrusted) code, so they cannot be influenced by the checkout.
+  - rule: untrusted_checkout_exec
+    path:
+      - .github/workflows/smoke-workflow-call.lock.yml
+      - .github/workflows/smoke-workflow-call-with-inputs.lock.yml