NVIDIA · prekshivyas · Sep 9, 2026 · Sep 4, 2026 · Sep 4, 2026 · Sep 4, 2026
diff --git a/.github/workflows/platform-vitest-main.yaml b/.github/workflows/platform-vitest-main.yaml
@@ -89,7 +89,8 @@ jobs:
       matrix:
         include:
           - shard: 1
-            timeout_minutes: 60
+            # The live E2E has a 70m timeout; every other step shares the remaining job time.
+            timeout_minutes: 150
           - shard: 2
             timeout_minutes: 30
           - shard: 3
@@ -192,9 +193,7 @@ jobs:
           NEMOCLAW_SANDBOX_NAME: "e2e-macos"
           NEMOCLAW_RUN_LIVE_E2E: "1"
         run: >-
-          npx vitest run --project e2e-live
-          test/e2e/live/full-e2e.test.ts
-          --silent=false --reporter=default
+          npx vitest run --project e2e-live test/e2e/live/full-e2e.test.ts --silent=false --reporter=default
 
       - name: Explain skipped macOS live E2E
         if: ${{ matrix.shard == 1 && (steps.macos_docker.outputs.docker_ok != 'true' || github.ref != 'refs/heads/main') }}

diff --git a/.github/workflows/portable-profile-e2e.yaml b/.github/workflows/portable-profile-e2e.yaml
@@ -41,6 +41,7 @@ on:
       - "test/e2e/live/portable-profile-gateway-proof.ts"
       - "test/e2e/live/portable-profile-rootless-linux.test.ts"
       - "tools/e2e/check-semantic-phases.mts"
+      - "tools/e2e/full-e2e-timeout-contract.mts"
 
 permissions:
   contents: read
@@ -155,7 +156,8 @@ jobs:
   portable-launch:
     if: ${{ github.ref == 'refs/heads/main' }}
     runs-on: ubuntu-26.04
-    timeout-minutes: 75
+    # The live E2E has a 70m timeout; every other step shares the remaining job time.
+    timeout-minutes: 135
     env:
       E2E_JOB: "1"
       E2E_TARGET_ID: portable-launch

diff --git a/test/automation/e2e/e2e-recommendations.test.ts b/test/automation/e2e/e2e-recommendations.test.ts
@@ -128,6 +128,7 @@ describe("E2E recommendation normalizer", () => {
         "tools/advisors/risk-plan.mts",
         "tools/e2e/credential-free-tests.mts",
         "tools/e2e/execution-coverage.mts",
+        "tools/e2e/full-e2e-timeout-contract.mts",
         "tools/e2e/gateway-runtime.mts",
         "tools/e2e/onboard-timeout-contract.mts",
         "tools/e2e/openshell-gateway-upgrade-fixture.mts",

diff --git a/test/automation/e2e/platform-vitest-main-workflow.test.ts b/test/automation/e2e/platform-vitest-main-workflow.test.ts
@@ -49,12 +49,24 @@ describe("platform evidence workflow", () => {
     },
   ])("limits credentialed $job E2E to the first main-branch shard", (workflowCase) => {
     const live = step(workflowCase.job, workflowCase.step);
-    expect(live.if).toContain("matrix.shard == 1");
-    expect(live.if).toContain(workflowCase.dockerOutput);
+    expect([
+      live.if?.includes("matrix.shard == 1"),
+      live.if?.includes(workflowCase.dockerOutput),
+    ]).toEqual([true, true]);
     expect(live.if).toContain("github.ref == 'refs/heads/main'");
     expect(live.env).toMatchObject({
       GITHUB_TOKEN: "${{ github.token }}",
       NVIDIA_INFERENCE_API_KEY: "${{ secrets.NVIDIA_INFERENCE_API_KEY }}",
     });
   });
+
+  it("reserves macOS cleanup and artifact time beyond the full E2E deadline", () => {
+    const macosShards = job("macos-vitest").strategy?.matrix?.include as Array<{
+      shard: number;
+      timeout_minutes: number;
+    }>;
+    const firstShard = macosShards.find(({ shard }) => shard === 1);
+
+    expect(firstShard?.timeout_minutes).toBe(150);
+  });
 });
diff --git a/test/e2e-runtime/brev-launchable-e2e.test.ts b/test/e2e-runtime/brev-launchable-e2e.test.ts
@@ -5,6 +5,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { afterEach, describe, expect, it, vi } from "vitest";
 
+import { FULL_E2E_TEST_TIMEOUT_MINUTES } from "../../tools/e2e/full-e2e-timeout-contract.mts";
 import {
   candidateSha,
   cleanupFixtures,
@@ -28,6 +29,16 @@ function identitySmokeEnv(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv {
 }
 
 describe("focused staging Brev Launchable lane", () => {
+  it("keeps the staging SSH wrapper outside the full E2E deadline", () => {
+    const source = fs.readFileSync(
+      path.resolve(import.meta.dirname, "../../tools/e2e/brev-launchable-e2e.sh"),
+      "utf8",
+    );
+    const defaultTimeout = source.match(/FULL_E2E_TIMEOUT_SECONDS:-([0-9]+)\}/u)?.[1];
+
+    expect(Number(defaultTimeout)).toBe(FULL_E2E_TEST_TIMEOUT_MINUTES * 60 + 300);
+  });
+
   it("runs the strict lane without inherited lane controls (#9925)", () => {
     vi.stubEnv("BREV_CREATE_RECONCILE_SECONDS", "0");
     vi.stubEnv("NEMOCLAW_BREV_DEFER_CLEANUP", "1");

diff --git a/test/e2e/README.md b/test/e2e/README.md
@@ -240,7 +240,9 @@ boundaries are the behavior under test.
 `.github/workflows/platform-vitest-main.yaml` publishes the `CI / Platform Compatibility` workflow.
 It runs the Ubuntu 26.04 compatibility contracts and the full Vitest suite in four shards on macOS and WSL.
 The matrix disables `fail-fast`.
-The first macOS shard has a 60-minute budget for live E2E; the other shards have 30 minutes.
+The first macOS shard has a 150-minute job timeout. Its live E2E has a
+70-minute timeout, and every other step shares the remaining job time. The
+other shards have 30 minutes.
 The first WSL shard has a 180-minute budget for root-required contracts and live E2E; the other shards have 90 minutes.
 
 On shard 1, the workflow runs focused macOS and WSL live E2E only when the run tests `main` and Docker is available.
@@ -497,11 +499,15 @@ The host must provide that user a secure, independently writable OS runtime auth
 The host must provide the util-linux `script` command and GNU `timeout` command.
 
 The helper rebuilds the candidate CLI, runs `connect --probe-only`, and then
-runs two `launch` sessions during the same fixed lease.
-Each real pseudo-terminal session sends two distinct messages and `/exit`, then
-requires process exit status `0`. The OpenClaw session store must append two
-nonempty `user` and `assistant` record pairs in one session. The helper does not
-compare message content. Terminal output is a bounded failure diagnostic only.
+runs two logical `launch` sessions during the same fixed lease. Each logical
+session may retry once with a fresh run ID and input only when the OpenClaw
+session store contains a structured transient provider-unavailability record
+and cleanup succeeds. Authentication, authorization, policy, malformed-response,
+cleanup, and unknown failures stop the acceptance test without retrying.
+Each successful real pseudo-terminal attempt sends two distinct messages and
+`/exit`, then requires process exit status `0`. The OpenClaw session store must
+append two nonempty `user` and `assistant` record pairs in one session. The helper
+does not compare message content. Terminal output is a bounded failure diagnostic only.
 Deterministic unit tests separately prove selection of the complete preflight
 and lease paths, stale-producer exclusion, the fixed time-unsafe quarantine,
 refusal to recover when prior evidence cannot be durably fenced, and the named

diff --git a/test/e2e/docs/README.md b/test/e2e/docs/README.md
@@ -352,7 +352,8 @@ test/e2e/
 - `.github/workflows/platform-vitest-main.yaml` publishes `CI / Platform Compatibility`.
   It runs the Ubuntu 26.04 compatibility contracts and four full-suite Vitest shards on each of macOS and WSL.
   Each macOS shard installs the pinned OpenShell formula.
-  Shard 1 has a 60-minute budget for live E2E; the other shards have 30 minutes.
+  Shard 1 has a 150-minute job timeout. Its live E2E has a 70-minute timeout, and every other step shares the remaining job time.
+  The other shards have 30 minutes.
   WSL shard 1 has a 180-minute budget for root-required contracts and live E2E; the other shards have 90 minutes.
   On shard 1, the workflow runs focused macOS and WSL live E2E only when the run tests `main` and Docker is available.
   Otherwise, those live tests skip and the platform contracts remain as evidence.

diff --git a/test/e2e/live/full-e2e.test.ts b/test/e2e/live/full-e2e.test.ts
@@ -50,14 +50,17 @@ import {
 import { readFullE2eColdWorkloadEvidence } from "./full-e2e-workload-evidence.ts";
 import { runOpenClawLaunchReadinessLeaseTurns } from "./launch-agent-turn.ts";
 import { bindApprovedPrBaseForBaseImageComparison } from "./pr-base-comparison.ts";
+import { FULL_E2E_TEST_TIMEOUT_MS } from "../../../tools/e2e/full-e2e-timeout-contract.mts";
 import { parseOpenClawJsonDocuments } from "../../../src/lib/openclaw/agent-json-provenance.ts";
 
 const SANDBOX_NAME = process.env.NEMOCLAW_SANDBOX_NAME ?? "e2e-full";
 const FULL_E2E_TARGET_ID = process.env.E2E_TARGET_ID ?? "full-e2e";
 const SETUP_MODE = process.env.NEMOCLAW_E2E_SETUP_MODE ?? "source-install";
 const USE_PREINSTALLED_LAUNCHABLE = SETUP_MODE === "preinstalled-launchable";
 const PORTABLE_PROFILE = process.env.NEMOCLAW_EXPERIMENTAL_PROFILE === "portable";
-const LIVE_TIMEOUT_MS = testTimeout(50 * 60_000);
+// Cold install plus two launch turns with one provider retry each can consume
+// almost 50 minutes before the remaining assertions and cleanup run.
+const LIVE_TIMEOUT_MS = testTimeout(FULL_E2E_TEST_TIMEOUT_MS);
 const INSTALL_TIMEOUT_MS = execTimeout(25 * 60_000);
 const FIRST_TURN_TIMEOUT_MS = 240_000;
 const MAX_SILENCE_SECS = 60;