diff --git a/.github/workflows/Run_RPS_AppKit-E8.yml b/.github/workflows/Run_RPS_AppKit-E8.yml
index dea636c..8326757 100644
--- a/.github/workflows/Run_RPS_AppKit-E8.yml
+++ b/.github/workflows/Run_RPS_AppKit-E8.yml
@@ -19,16 +19,41 @@ on:
   workflow_dispatch:
   workflow_run:
     workflows: ["Build RPS for AppKit-E8 Hardware"]
-    types: [completed]
-    branches: [main]
+    branches: [ main ]
+    types: [ completed ]
 
 permissions:
   contents: read
   actions: read
 
 jobs:
+  fork-restricted:
+    name: Private runner restricted
+    # trigger this only for forks, to prevent them from action runout
+    if: ${{ github.repository != 'Arm-Examples/ModelNova' }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Notify runner restriction
+        run: |
+          MESSAGE="Workflows on the private runner are restricted for security reasons."
+          GUIDANCE="Contributors can validate changes using GitHub-hosted runners."
+          echo "${MESSAGE}"
+          echo "${GUIDANCE}"
+          {
+            echo "## ⚠️ Workflow was not run"
+            echo ""
+            echo "${MESSAGE}"
+            echo ""
+            echo "${GUIDANCE}"
+          } >> "$GITHUB_STEP_SUMMARY"
+          exit 1
+
   CI:
-    if: ${{ github.event_name == 'workflow_dispatch' || (github.event.workflow_run.conclusion == 'success') }}
+    if: >-
+      ${{ (github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+      github.event.workflow_run.head_repository.full_name == 'Arm-Examples/ModelNova')) }}
     runs-on: [self-hosted, rsp-p5-01]
 
     steps:
@@ -56,7 +81,7 @@ jobs:
           nohup pyocd run --uid L96807771A --cbuild-run SDS+AppKit-E8-U85.cbuild-run.yml --timelimit 30 --eot > pyocd.out 2>&1 &
 
       - name: Start the SDSIO server on the Raspberry Pi
-        working-directory: ./RockPaperScissors/AppKit-E8_USB      
+        working-directory: ./RockPaperScissors/AppKit-E8_USB
         run: |
           sleep 2 # Delay to ensure that pyOCD is started
           sdsio-server --control SDS.sdsio.yml --playback --exit-after-playback --no-progress-info | tee sdsio-server.log
diff --git a/RockPaperScissors/AppKit-E8_USB/SDS.sdsio.yml b/RockPaperScissors/AppKit-E8_USB/SDS.sdsio.yml
index 379452a..833ad42 100644
--- a/RockPaperScissors/AppKit-E8_USB/SDS.sdsio.yml
+++ b/RockPaperScissors/AppKit-E8_USB/SDS.sdsio.yml
@@ -20,7 +20,8 @@ sdsio:
   # Defines a playback test sequence
   play:
     - step: "Test 0: ML_In.0.sds"
-      labels: [ 0 ]
+      labels:
+        - "0"
     - step: "Test 1: ML_In.rock.1.sds + ML_In.rock.2.sds + ML_In.rock.3.sds"
       labels: 
         - rock.1