diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1badc6d94..80c3c8b15 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -683,7 +683,6 @@ jobs:
     env:
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
       IMPECCABLE_SKILL_BEHAVIOR_MODELS: claude-sonnet-5
-      IMPECCABLE_SKILL_BEHAVIOR_TRACE_DIR: ${{ runner.temp }}/skill-workflow-traces
     steps:
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -703,6 +702,8 @@ jobs:
           bun run fetch:engine
           bunx playwright install --with-deps chromium
       - name: Run completed skill workflows
+        env:
+          IMPECCABLE_SKILL_BEHAVIOR_TRACE_DIR: ${{ runner.temp }}/skill-workflow-traces
         run: bun run test:skill-workflow
       - name: Retain diagnostic traces
         if: always()
diff --git a/tests/ci-test-plan.test.mjs b/tests/ci-test-plan.test.mjs
index 5e1154349..75fa6e8e1 100644
--- a/tests/ci-test-plan.test.mjs
+++ b/tests/ci-test-plan.test.mjs
@@ -12,6 +12,7 @@ describe('ci-test-plan', () => {
     const workflow = readFileSync('.github/workflows/ci.yml', 'utf8');
     assert.match(workflow, /skill_workflow:\s*description:[^\n]+\s*type: boolean\s*default: false/);
     const job = workflow.split('\n  skill-workflow:')[1];
+    assert.doesNotMatch(job.split('\n    steps:')[0], /runner\./, 'runner context is unavailable at job-level env');
     assert.match(job, /if: github.event_name == 'workflow_dispatch' && inputs.skill_workflow/);
     assert.ok(job.indexOf('bun run fetch:engine') < job.indexOf('bun run test:skill-workflow'));
     assert.ok(job.indexOf('playwright install --with-deps chromium') < job.indexOf('bun run test:skill-workflow'));