Chrome exits with SIGTRAP before DevTools starts because every runner step inherits an 8 GiB virtual-address limit. Keep a finite 2 TiB default so V8 can reserve its sandbox and guard regions. Explicit operator limits and existing file, process and CPU guards retain their behavior.
Add Linux regressions through both generated step wrappers: reserve and release the runtime-sized arena without touching its pages, reject an allocation above the cap, and prove a child cannot raise the hard cap. Normal CI builds and preserves the standalone Linux runner with its source, dependency versions and checksum for a traceable rollout.
The pull-request app build now uses a disposable Postgres 17 database migrated from the committed schema, while retaining strict rendering failures and all deployment conditions. The shared feed reader imports its database explicitly so renderers without application globals can use it. Invoke the tracked publication script through Bash.
Validation: frozen install, Buddy lint/typecheck, focused tests and maintained cross-build passed locally. A fresh-process regression reproduced and resolved the feed binding failure without a database service. Normal Linux CI exercises both real database engines, kernel-limit tests and the strict preview build. Pull-request artifacts retain their original merge-source provenance; production consumption requires a distinct, qualified normal Main artifact.