From a6bc7c6386b4d2e8e815791f186097820a22eaae Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 29 Aug 2026 23:17:05 +0000
Subject: [PATCH 1/3] Initial plan


From ebe2c94462bd9dd8c747227a8424cf0cae581d2b Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 29 Aug 2026 23:20:58 +0000
Subject: [PATCH 2/3] Run Rust CI on macOS

Co-authored-by: mcaney006 <254775535+mcaney006@users.noreply.github.com>
---
 .github/workflows/rust.yml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .github/workflows/rust.yml

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
new file mode 100644
index 0000000..7c58f32
--- /dev/null
+++ b/.github/workflows/rust.yml
@@ -0,0 +1,21 @@
+name: Rust
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["main"]
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build:
+    runs-on: macos-latest
+
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build
+        run: cargo build --verbose
+      - name: Run tests
+        run: cargo test --verbose

From 8193ff8f1d88d2ccbfdff5f37de2c453c371b7ea Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 29 Aug 2026 23:21:37 +0000
Subject: [PATCH 3/3] Restrict Rust workflow token permissions

Co-authored-by: mcaney006 <254775535+mcaney006@users.noreply.github.com>
---
 .github/workflows/rust.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 7c58f32..f87fb77 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -11,6 +11,8 @@ env:
 
 jobs:
   build:
+    permissions:
+      contents: read
     runs-on: macos-latest
 
     steps: