soak: upstream HEAD (b01417643e) + every live fix branch, 2026-10-22

.github/styles/config/vocabularies/TraceMachina/accept.txt

@@ -493,3 +493,10 @@ Flybody
 MuJoCo
 connectome
 simulatable
+<<<<<<< HEAD
+[Rr]eachability
+recursed
+recursing
+=======
+unary
+>>>>>>> origin/b7r6/shard-ring-dead-peer-failover

.github/workflows/main.yaml

@@ -1,17 +1,23 @@
 name: CI / Integration
 
 # Controls when the workflow will run.
+#
+# The only live job here (integration-tests) builds the trace_machina/nativelink
+# OCI image from the docker-compose Dockerfile and runs run_integration_tests.sh.
+# That is a per-PR OCI build — the same class of heavy work #image-off-pr moved
+# off PRs for image.yaml and #2877 moved off PRs for the nix integration job.
+# This lane fell in the crack between those two, so defer it the same way:
+# nightly cross-check + on every merge to main, not on every PR. Per-PR
+# build/test signal is carried by the Nix "Bazel Dev" lane.
 on:
   push:
     branches: [ main ]
     paths-ignore:
       - '.github/styles/**'
       - 'web/**'
-  pull_request:
-    branches: [ main ]
-    paths-ignore:
-      - '.github/styles/**'
-      - 'web/**'
+  schedule:
+    - cron: '0 7 * * *' # 07:00 UTC daily (off-peak)
+  workflow_dispatch:
 
 permissions: read-all
 

Cargo.toml

@@ -65,7 +65,10 @@ rand = { version = "0.9.0", default-features = false, features = [
 rustls-pki-types = { version = "1.13.1", features = [
   "std",
 ], default-features = false }
-sha2 = { version = "0.10.8", default-features = false }
+# `asm` unlocks the RustCrypto hardware SHA-2 backends (aarch64 is gated behind
+# it) with runtime HWCAP detection — hardware SHA on-core, software fallback
+# elsewhere.
+sha2 = { version = "0.10.8", default-features = false, features = ["asm"] }
 tokio = { version = "1.52.2", features = [
   "fs",
   "io-util",