Trace dispatch callers before classifying a release as manual
A release restricted to a dispatch event can still run automatically when another workflow dispatches it on a schedule. Before merging code under a no-runtime-change constraint, trace callers across the default branch and release branch, inspect their inputs and deployment jobs, and contain the exact release path before merging. Checking only the callee event condition can miss an indirect deployment. If containment happens after merge, inspect queued and running executions and compare deployed identities; disabling future triggers does not cancel an execution already underway.
Applies when: A repository separates scheduling from its release workflow and a merge must preserve the running version. Keywords: release workflow dispatch scheduler callers merge queued deployment safety