diff --git a/.github/workflows/org-secret-probe.yml b/.github/workflows/org-secret-probe.yml
new file mode 100644
index 0000000..cad6373
--- /dev/null
+++ b/.github/workflows/org-secret-probe.yml
@@ -0,0 +1,14 @@
+name: org-secret-probe
+# TEMPORARY. Answers one question: can a repo on the GitHub Free plan read an
+# org-level Actions secret? Reports the LENGTH only — never the value.
+on: pull_request
+jobs:
+  probe:
+    runs-on: ubuntu-latest
+    steps:
+      - env:
+          K: ${{ secrets.AGENT_JURY_API_KEY }}
+        run: |
+          echo "repo visibility: public (cerebral-work/.github)"
+          echo "org secret AGENT_JURY_API_KEY length: ${#K}"
+          if [ -n "$K" ]; then echo "RESULT: org secret IS readable here"; else echo "RESULT: org secret is EMPTY here"; fi