{
  "changed": [
    ".github/workflows/ci.yml",
    ".github/ci/test-temp-sandbox.sh",
    ".github/ci/test-temp-sandbox.ps1"
  ],
  "result": "Added unique run/attempt-scoped TEMP/TMP roots (plus TMPDIR on Linux) to every self-hosted cargo test/nextest job: test, n1-gate, twohost-a, and twohost-b. Each job now runs OS-native always-run daemon reap before OS-native sandbox cleanup. Cleanup validates scope, retries recursive deletion five times with bounded backoff, and exits with a GitHub error if the root remains. Setup and cleanup carry int->REQ-TEST-TMPDIR-HYGIENE evidence. No release workflow or free-space preflight was touched.",
  "verification": "Static workflow coverage checked for all cargo test/nextest jobs and reap-before-cleanup ordering. Builds, linters, formatters, and tests were skipped per delegation constraint."
}