From 8663b93ae8d58f98aa17afee8a252958c182ae89 Mon Sep 17 00:00:00 2001
From: Ralf Anton Beier <ralf_beier@me.com>
Date: Sun, 3 May 2026 19:57:56 +0200
Subject: [PATCH] ci: migrate 5 of 8 ci.yml jobs to smithy self-hosted runners

  rust-cpu     test, clippy, coverage, rivet
  light        fmt

Stays on ubuntu-latest:
  - verify     needs `sudo apt-get install libz3-dev` (smithy has no sudo;
               libz3-dev not yet in toolchains role)
  - kani       Kani-CBMC bundle not yet provisioned on smithy
  - bazel      Bazel + Nix + Rocq toolchain not on smithy
---
 .github/workflows/ci.yml | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 83ccdf3..2d73897 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ env:
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, rust-cpu]
     env:
       RUSTFLAGS: -Dwarnings
     steps:
@@ -33,7 +33,7 @@ jobs:
 
   clippy:
     name: Clippy
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, rust-cpu]
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
@@ -54,7 +54,7 @@ jobs:
 
   fmt:
     name: Format
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, light]
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
@@ -75,6 +75,9 @@ jobs:
 
   verify:
     name: Z3 Verification
+    # Stays on ubuntu-latest: needs `sudo apt-get install -y libz3-dev`
+    # (smithy runners have no sudo). Move once libz3-dev is added to
+    # the smithy toolchains role.
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -99,7 +102,7 @@ jobs:
   coverage:
     name: Code Coverage
     needs: [test]
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, rust-cpu]
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@nightly
@@ -132,6 +135,9 @@ jobs:
 
   kani:
     name: Kani Verification
+    # Stays on ubuntu-latest: Kani-CBMC bundle is not yet provisioned
+    # in the smithy toolchains role (tracked in playbook out-of-scope
+    # table). Move once smithy ships kani-verifier + CBMC.
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -143,7 +149,7 @@ jobs:
 
   rivet:
     name: Rivet Validation
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, x64, rust-cpu]
     steps:
       - uses: actions/checkout@v4
       - uses: dtolnay/rust-toolchain@stable
@@ -180,6 +186,9 @@ jobs:
 
   bazel:
     name: Bazel Build & Proofs
+    # Stays on ubuntu-latest: needs Nix + Bazel + Rocq via Bazel
+    # (none provisioned on smithy; tracked in playbook out-of-scope
+    # table for both Bazel and Rocq).
     runs-on: ubuntu-latest
     timeout-minutes: 45
     steps: