The raw Actions artifact download endpoint looks up the artifact row before validating the signed URL. Without authentication, an invalid signature produces one response when the supplied global artifact ID belongs to the named repository (and is upload-confirmed or expired) and a different response when it does not. Because artifact IDs are global auto-incrementing integers, this lets an unauthenticated caller test whether a guessed artifact ID belongs to an already-named private repository.