A repository team wants every Copilot-generated pull request to prove that the agent task contract was present before review. The contract file must define the agent inputs, expected outputs, and success criteria. The workflow must run automatically for pull requests into main and publish a small evidence artifact for reviewers. Which option completes the workflow?

name: validate-agent-contract

on:
  (Missing value 1):
    branches:
      - main

permissions:
  contents: read
  pull-requests: read

jobs:
  contract:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

        - name: Check agent task contract
          (Missing value 2): |
            test -f .github/agent-contract.md
            grep -q "^Inputs:" .github/agent-contract.md
            grep -q "^Outputs:" .github/agent-contract.md
            grep -q "^Success criteria:" .github/agent-contract.md

        - name: Upload validation evidence
          (Missing value 3): actions/upload-artifact@v4
          with:
            name: agent-contract-evidence
            path: .github/agent-contract.md