Record clean CI workflow command verification

docs/operations/VPNRUNTIME_STAGE_EXECUTION_2026-05-12.md

@@ -140,3 +140,22 @@ Verification:
   `pwsh -NoProfile -ExecutionPolicy Bypass -File scripts/smoke/run-vpnruntime-ci-guards.ps1 -AntiFlakeCount 20 -TargetedCount 50`: PASS
 - corrected published head:
   `43663e403033223af8945c51395c223e856d5016`
+
+### 2026-05-12 CI Workflow Path Correction
+
+Follow-up review found that the GitHub Actions `node-agent` job runs with
+`working-directory: agents/rap-node-agent`, while the one-shot guard script is
+stored under the repository root. The workflow path was corrected to:
+
+```text
+../../scripts/smoke/run-vpnruntime-ci-guards.ps1
+```
+
+Verification from a clean detached worktree at corrected `HEAD`:
+
+- backend job commands (`go mod download`, `go build ./...`, `go test ./...`):
+  PASS
+- node-agent job commands (`go mod download`, `go test ./...`, anti-flake,
+  targeted anti-flake, race, one-shot guard): PASS
+- corrected published head:
+  `a9f79366561d6a9b8edb0956b391b943b6773030`