test(ci): preserve dev PR coverage and align testing policy

Co-Authored-By: Paperclip <noreply@paperclip.ing>

Author: Paperclip-Paperclip

testing.md

@@ -256,8 +256,8 @@ keyboard behavior, or data integrity.
 checks on Blacksmith Linux and GitHub-hosted Windows.
 [WFL tests](.github/workflows/wfl-tests.yml) runs the complete WFL suite via
 `wfl --execution-timeout 1200 scripts/run_tests.wfl` on
-`blacksmith-2vcpu-ubuntu-2404`. Both workflows run for pushes and pull requests to
-`main` and support manual dispatch.
+`blacksmith-2vcpu-ubuntu-2404`. Both workflows run for pushes to `main`, pull requests to `main` and `dev`,
+and manual dispatch.
 
 WFL tests pulls `bsbyrdwfl/wfl:nightly` from Docker Hub for every run, resolves
 the image digest, and uses that immutable image for that run's runtime checks.

tests/tooling/ci_targets.test.wfl

@@ -0,0 +1,15 @@
+// Keep dev PR coverage while preserving the main-only push boundary.
+include from "../../scripts/test_support.wfl"
+
+store repo_root as path_dirname of (path_dirname of script_directory)
+
+describe "Governance rollout CI targets":
+    test "both workflows admit dev PRs without broadening push events":
+        for each workflow_name in ["governance.yml", "wfl-tests.yml"]:
+            store workflow_path as path_join of repo_root and ".github/workflows" and workflow_name
+            store workflow_text as test_read_text of workflow_path
+            expect workflow_text to contain "  pull_request:\n    branches: [main, dev]"
+            expect workflow_text to contain "  push:\n    branches: [main]\n"
+        end for
+    end test
+end describe