Cuts CI wall-clock time on the landing path by sharding Linux unit tests, using debug builds for macOS landing E2E, and tuning Windows Defender on hosted runners.
Shards Linux Rust tests from one nextest archive into three hash partitions; Unit tests (Linux) now aggregates all Linux unit lanes.
macOS landing E2E maps the stage selector to dev/debug (line-tables-only) instead of a non-LTO release build; publication continues to test shipped fat-LTO binaries.
Adds a shared windows-ci-defender action that excludes CI build/temp paths and disables realtime monitoring, used only on disposable GitHub-hosted Windows runners.
Adds a search-domain descriptor for the land/ci-critical-path slice and updates workflow guard tests to cover the new selector and shard contracts.
Confidence Score: 5/5
The PR appears safe to merge; no actionable issues were found.
Summary
This PR changes CI to shorten the time before checks finish.
Linux Rust tests run from a shared archive across parallel shards.
Hosted Windows test runners tune Defender for CI builds.
macOS landing E2E uses debug builds when staging is selected.
No actionable issues were found. This review checked code and workflow definitions; it did not run CI.
Diagram
%%{init: {'theme': 'neutral'}}%%
flowchart TD
Archive["Linux archive + serial probes + inventory proof"] --> Units["Three unit shards"]
Archive --> Integration["Three integration shards"]
Archive --> Summary["Required Linux summary"]
Units --> Summary
Integration --> Summary
Conformance["Watcher + conformance + Bun tests"] --> Summary
