Runs on pull_request_target so the workflow always comes from main, on the confined runner tier. Installs CPU-only torch before the package so pip does not pull the CUDA build, then runs pytest. .dejima/allowed-domains declares the hosts the job fetches from.