diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4b037ab..c4d0954 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,6 +17,6 @@ jobs:
     uses: peptiderepo/peptide-e2e/.github/workflows/ci.yml@main
     with:
       tests: stubs
-      has_js: true
+      has_js: false
       line_limit_paths: includes
     secrets: inherit
diff --git a/tests/unit/CaptureWriterTest.php b/tests/unit/CaptureWriterTest.php
index 6ca29e3..9a039b5 100644
--- a/tests/unit/CaptureWriterTest.php
+++ b/tests/unit/CaptureWriterTest.php
@@ -122,6 +122,14 @@ class CaptureWriterTest extends TestCase {
 
 	// ── Test 4 (P0 SECURITY — executor path): sentinel must not leak ──────
 
+	/**
+	 * Defines PRV_OPENROUTER_API_KEY as a process-scoped PHP constant.
+	 * Must run in a separate process to prevent that constant from bleeding
+	 * into sibling test classes (e.g. KeyStoreTest) within the same PHPUnit run.
+	 *
+	 * @runInSeparateProcess
+	 * @preserveGlobalState disabled
+	 */
 	public function test_p0_executor_path_sentinel_key_does_not_leak(): void {
 		if ( ! defined( 'PRV_OPENROUTER_API_KEY' ) ) {
 			define( 'PRV_OPENROUTER_API_KEY', 'sk-or-TEST-LEAK-CANARY' );