A team updated repository instructions after evaluation showed the Copilot coding agent repeatedly used stale validation steps. You need a workflow that runs only when pull requests change memory or instruction files and executes the memory evaluation script before the PR can be merged. Which option completes the workflow?

The correct answer ensures the workflow runs precisely when needed and has the necessary permissions. Missing value 1: pullrequest This trigger is essential because the requirement states the workflow should run "when pull requests change memory or instruction files." push would trigger on every push, not just PRs. workflowdispatch requires manual triggering. pullrequesttarget has different security implications and is typically used for external contributions, not internal changes to configuration files. Missing value 2: pull-requests This permission is required for GitHub Actions to interact with pull requests, such as reporting status checks, which is necessary before a PR can be merged. issues is for issue management, checks is a broader permission that includes pull-requests but pull-requests is more specific here, and actions is for managing workflow runs themselves. Missing value 3: run This keyword is used to execute shell commands directly within a step, which is what python scripts/evaluatememorycases.py is. uses is for calling pre-built actions.