A repository uses the following workflow for Copilot-generated pull requests. The team wants all agent PRs to receive automated feedback quickly, but a human should approve only the integration job that uses the protected agent-integration environment. Evaluate the following statements. 1. The validate job can run without waiting for the environment reviewer. 2. The integration job requests human approval only after validate succeeds and the PR is not draft. 3. The pull-requests: read permission lets the workflow approve the protected environment automatically.

name: agent-pr-review

on:
  pull_request:
    types:
      - opened
      - synchronize
      - ready_for_review

permissions:
  contents: read
  pull-requests: read
  security-events: read

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Test
        run: npm ci && npm test
      - name: Static analysis
        run: npm run lint

   integration:
     needs: validate
     if: github.event.pull_request.draft == false
     environment: agent-integration
     runs-on: ubuntu-latest
     steps:
       - name: Integration smoke test
         run: npm run smoke