diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml
index cc80b62..7b85f3a 100644
--- a/.gitea/workflows/ci.yaml
+++ b/.gitea/workflows/ci.yaml
@@ -46,11 +46,18 @@ jobs:
   #   - Running this job on the bare runner host instead of in a container (tried and
   #     reverted, same as terdut-server's `chart` job does for get.helm.sh) fails
   #     earlier and differently: "go: command not found" -- the host has no Go.
+  #   - The act-runner dind sidecar's MTU (Ryuvia/charts#272, merged and reconciled
+  #     2026-09-30: explicit `"mtu": 1450` in its daemon.json, matching Flannel's
+  #     VXLAN-reduced pod MTU, since dockerd's bridge networks default to 1500
+  #     unset) -- tested against this exact failure post-fix (isolated `make test`,
+  #     bypassing lint's own unrelated github.com flakiness) and got the identical
+  #     "TLS handshake timeout" fetching envtest-v1.37.0-linux-amd64.tar.gz. Ruled
+  #     out: the MTU mismatch was real but wasn't (solely) the cause of this.
   # So whatever blocks github.com from the dind bridge sits outside anything this
-  # workspace's repos configure -- a firewall/DNS layer neither Ryuvia/charts nor
-  # Ryuvia/k8s expresses in Kubernetes objects. `make test` fails on the envtest fetch
-  # until that's found and fixed (or the binaries are vendored -- see ROADMAP.md/the
-  # PR discussion for why that was declined for now).
+  # workspace's repos configure, and outside the MTU theory -- still unidentified as
+  # of 2026-09-30. `make test` fails on the envtest fetch until that's found and
+  # fixed (or the binaries are vendored -- see ROADMAP.md/the PR discussion for why
+  # that was declined for now).
   test:
     runs-on: ubuntu-latest
     container:
@@ -75,12 +82,7 @@ jobs:
           fi
 
       - name: Format, lint and test
-        # TEMPORARY: `lint` is blocked by an unrelated github.com git-clone failure
-        # (golangci-lint's own custom-gcl build), which never lets this reach `test`'s
-        # setup-envtest step -- the one the act-runner MTU fix (Ryuvia/charts#272) was
-        # actually meant to affect. Narrowed to `test` alone to get a clean read on
-        # that specific question; revert to `make fmt lint test` once answered.
-        run: make test
+        run: make fmt lint test
 
   # No `chart` job yet -- there's no Helm chart until Stage 6 (ROADMAP.md). No
   # `security` job yet either (govulncheck/gitleaks, as terdut-server has); add one