The race suite ran under Go's default 10 minute limit, which a slow runner would hit; it now has 40 minutes in a 60 minute job. Go is the 1.27 line the code was verified with, not go.mod's minimum, so govulncheck checks a patched standard library, and govulncheck is pinned to v1.9.0 so a new release can't break the build. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>