name: one job allows, one denies
on:
  workflow_dispatch:
    inputs:
      self-did:
        required: true
jobs:
  first:
    runs-on: self-hosted
    outputs:
      allow: 'true'
    steps: []
  second:
    runs-on: self-hosted
    outputs:
      allow: 'false'
      violations: '["the second job denies"]'
    steps: []