The Windows payload fixture uses a text placeholder for t3code.exe. Pin only the native-load probe platform to linux in the three cases that reach it, while leaving host-native paths and real tar, archive, digest, ASAR, and self-containment checks active.

The broad Windows lane also runs four filesystem-heavy suites at once. Give the cold pnpm-store dependency scan 120 seconds so it retains its full closure assertions under that load instead of inheriting the 60-second root limit.

Build the browser-secret output expectation and sign-macos path match with host-aware separators.

Co-Authored-By: Claude Code <noreply@anthropic.com>