diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml
index 031f812..cd061b0 100644
--- a/.github/workflows/semantic-release.yml
+++ b/.github/workflows/semantic-release.yml
@@ -1,4 +1,5 @@
 name: Semantic Release
+run-name: ${{ github.actor }} is automatically releasing
 
 on:
   push:
@@ -6,12 +7,6 @@ on:
       - main
       - dev
 
-permissions:
-  contents: write
-  issues: write
-  pull-requests: write
-  id-token: write
-
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -52,6 +47,24 @@ jobs:
           fetch-depth: 0
           token: ${{ steps.generate_token.outputs.token }}
 
+      - name: Debug token & actor
+        env:
+          APP_TOKEN: ${{ steps.generate_token.outputs.token }}
+        run: |
+          echo "--- git remote ---"
+          git remote -v || true
+          echo
+          echo "--- git config user ---"
+          git config user.name || true
+          git config user.email || true
+          echo
+          echo "--- GraphQL viewer (login / type) ---"
+          curl -s -H "Authorization: Bearer $APP_TOKEN" -H "Accept: application/vnd.github+json" \
+            -d '{"query":"{ viewer { login __typename } }"}' https://api.github.com/graphql || true
+          echo
+          echo "--- REST /repos response (first 200 lines) ---"
+          curl -s -H "Authorization: Bearer $APP_TOKEN" -H "Accept: application/vnd.github+json" https://api.github.com/repos/${{ github.repository }} | sed -n '1,200p' || true
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with: