The wall-clock budget has under 2x margin on shared ubuntu runners, and a red exact-head check blocks a merge that must never be rerun to green. The job now runs on each push to main and on workflow_dispatch, not on pull requests. TESTING.md says a red run on main means fix the code.