Test Core (3/8): 2260.4s measured vs 1464.6s predicted across 8 package(s) = 1.54x (warning past 1.3x, DRIFT past 1.5x), past the drift bound. Heaviest overshoot: @objectstack/plugin-security, predicted 245.6s, measured 587.8s. Report only, on every event (this is a `pull_request` run): a shard's wall measures the run's load as much as the dataset, so this is a reading, not a failure. Refresh scripts/test-shard-timings.json (see scripts/measure-test-shard-timings.mjs).

@objectstack/service-settings: 190.35s, over its 157.56s ceiling. Slowest file: src/value-domains.shared-predicate.pin.test.ts 1.86s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/service-package: 52.83s, over its 32.90s ceiling. Slowest file: src/install-primitive-declaration.test.ts 2.54s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/service-datasource: 153.41s, over its 128.93s ceiling. Slowest file: src/__tests__/bound-secret-dsn-branches.test.ts 8.78s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/plugin-security: 587.84s, over its 474.43s ceiling. Slowest file: src/explain-enforce-parity.test.ts 17.02s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/plugin-approvals: 323.39s, over its 290.60s ceiling. Slowest file: src/request-child-read-gate.integration.test.ts 9.04s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/connector-mcp: 56.12s, over its 54.85s ceiling. Slowest file: src/mcp-stdio-credential-env.test.ts 2.16s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/cloud-connection: 289.91s, over its 163.89s ceiling. Slowest file: src/marketplace-install-local-seed-lookup.test.ts 6.99s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

@objectstack/client: 187.53s, over its 179.74s ceiling. Slowest file: src/auth-rotated-session-token.test.ts 12.80s. Report only, on every event (this is a `pull_request` run): a suite's wall on a shared runner measures the run's load as much as the package, so this is a reading, not a failure.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"

Remote caching disabled (remote cache requested — set TURBO_TOKEN and TURBO_TEAM, or run "turbo login" and "turbo link") -- expected: the remote-cache credentials are passed only to merge_group runs and runs on main, so this run built from the restored Actions-cache seed.

"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"