diff --git a/.gitea/workflows/verify-subfolder-action.yml b/.gitea/workflows/verify-subfolder-action.yml
new file mode 100644
index 0000000..d793dff
--- /dev/null
+++ b/.gitea/workflows/verify-subfolder-action.yml
@@ -0,0 +1,42 @@
+name: Verify subfolder action
+
+# Throwaway (MIL-012 task 1, #182): does `uses:` resolve a composite action in a
+# subfolder of this repository, in the short form and with the full address?
+# Every input is left empty, so a resolved action fails with its own
+# [configuration] message; "action not found" means it did not resolve.
+on:
+  push:
+    branches: [ verify-subfolder-action ]
+
+jobs:
+  wg-short:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: TirSystem/github-action/actions/connect-wireguard@wireguard-vpn-action
+
+  wg-full:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: https://git.tirsystem.com/TirSystem/github-action/actions/connect-wireguard@wireguard-vpn-action
+
+  ts-short:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: TirSystem/github-action/actions/connect-tailscale@wireguard-vpn-action
+
+  ts-full:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: https://git.tirsystem.com/TirSystem/github-action/actions/connect-tailscale@wireguard-vpn-action