diff --git a/patterns/workflow-generation.json b/patterns/workflow-generation.json
index bb5827f..b41e239 100644
--- a/patterns/workflow-generation.json
+++ b/patterns/workflow-generation.json
@@ -369,7 +369,8 @@
         "- Stick to facts. Do not editorialize or make recommendations.",
         "- If there is no activity, create a brief report noting that.",
         "- Label the report issue with `status-report`."
-      ]
+      ],
+      "min_integrity": "none"
     },
     "dependency-monitor": {
       "icon": "package",
diff --git a/test/workflow.test.js b/test/workflow.test.js
index b043a84..58ed889 100644
--- a/test/workflow.test.js
+++ b/test/workflow.test.js
@@ -310,7 +310,7 @@ describe('generateWorkflowFile', () => {
     expect(md).toContain('  github:\n    toolsets: [repos, issues, pull_requests]\n    min-integrity: approved\n');
   });
 
-  it('does not add min-integrity for archetypes without untrusted external content', () => {
+  it('sets min-integrity: none for status-report, which reads untrusted content but only summarizes', () => {
     const md = generateWorkflowFile(
       answers({
         archetype: 'status-report',
@@ -319,6 +319,18 @@ describe('generateWorkflowFile', () => {
       }),
       patterns
     );
+    expect(md).toContain('    min-integrity: none\n');
+  });
+
+  it('does not add min-integrity for archetypes without github toolsets', () => {
+    const md = generateWorkflowFile(
+      answers({
+        archetype: 'documentation-updater',
+        triggers: ['push'],
+        outputs: ['create-pull-request']
+      }),
+      patterns
+    );
     expect(md).not.toContain('min-integrity');
   });