Hello @angelo_mekenkamp
There was a bug fix applied that closes this loophole in how the API works. In the past, you could use the [Test Workflow by ID] (test-workflow | SailPoint Developer Community) API against Enabled workflows.
You can duplicate the existing workflow and run a “Test Workflow by ID” using the same API but we should not allow workflows that are Enabled to have be run using the TEST API.