diff --git a/tests/test_runtime_safety.py b/tests/test_runtime_safety.py
new file mode 100644
index 0000000..e495027
--- /dev/null
+++ b/tests/test_runtime_safety.py
@@ -0,0 +1,12 @@
+"""Runtime safety checks for the current deterministic release validator."""
+
+from agent import CustomerIntegrationEngineer
+
+
+def test_no_llm_required_by_pricing():
+    assert CustomerIntegrationEngineer.pricing.caller_pays_llm is False
+
+
+def test_workspace_modes_declared():
+    modes = {mode.value for mode in CustomerIntegrationEngineer.workspace_access.allowed_modes}
+    assert {"read_only", "read_write_overlay"} <= modes