Test Core (2/8): 405.7s measured vs 302.4s predicted across 5 package(s) = 1.34x (warning past 1.3x, DRIFT past 1.5x). Heaviest overshoot: @objectstack/lint, predicted 141.6s, measured 178.9s. scripts/test-shard-timings.json is drifting from the runtime; refresh it before it reaches the drift bound (see scripts/measure-test-shard-timings.mjs). Not a failure: this step stays green on every event.

Test Core (3/8): 2198.8s measured vs 1462.9s predicted across 7 package(s) = 1.50x (warning past 1.3x, DRIFT past 1.5x), past the drift bound. Heaviest overshoot: @objectstack/plugin-security, predicted 245.6s, measured 578.6s. Report only, on every event (this is a `pull_request` run): a shard's wall measures the run's load as much as the dataset, so this is a reading, not a failure. Refresh scripts/test-shard-timings.json (see scripts/measure-test-shard-timings.mjs).

@objectstack/types: 32.81s, over its 32.05s ceiling. Slowest file: src/node.test.ts 7.52s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/service-settings: 189.50s, over its 157.56s ceiling. Slowest file: src/settings-organization-isolation.pin.test.ts 1.61s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/service-package: 38.12s, over its 32.90s ceiling. Slowest file: src/hydration-convert-forward.test.ts 1.80s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/service-datasource: 155.93s, over its 128.93s ceiling. Slowest file: src/__tests__/bound-secret-dsn-branches.test.ts 8.80s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/plugin-security: 578.60s, over its 474.43s ceiling. Slowest file: src/delegated-organization-membership.test.ts 17.03s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/plugin-approvals: 302.64s, over its 290.60s ceiling. Slowest file: src/request-child-read-gate.integration.test.ts 8.44s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/core: 155.31s, over its 151.42s ceiling. Slowest file: src/security/auth-gate.test.ts 6.30s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/connector-mcp: 57.62s, over its 54.85s ceiling. Slowest file: src/mcp-http-discovery-faults.test.ts 2.27s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/cloud-connection: 283.28s, over its 163.89s ceiling. Slowest file: src/marketplace-install-local-seed-lookup.test.ts 6.12s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/client: 188.83s, over its 179.74s ceiling. Slowest file: src/auth-rotated-session-token.test.ts 10.29s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"