Both downloads in the previous commit were wrong, and the headless job is the one that gates a push, so they would have turned a working gate red. nextest names its Linux builds "linux" and "linux-arm"; a target triple is a 404, and `curl -fsSL | tar` fails obscurely on the HTML that comes back. cargo-deny has no 0.18.6. cargo-deny is pinned to 0.20.2, the version a developer on this project actually has installed, so a licence or source verdict cannot come out one way on a laptop and another way in CI. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01SPYebLiN2w4TqnHUYGdECq