- api job: runs-on ubuntu-latest, if pull_request, parallel with fast-checks (no needs:) - services: mariadb:11 with healthcheck.sh --connect --innodb_initialized options (--health-start-period=30s for MariaDB 11 InnoDB cold-start, --health-retries=10) - DB_HOST: mariadb (Docker-executor confirmed by D-PROBE-02) - Throwaway creds: familysync/testpass scoped to ephemeral service container (T-08-03) - No actions/cache (D-PROBE-04) - Node mysql2 readiness poll via --input-type=commonjs inline script, 90s deadline (no mysql CLI in runner image per D-PROBE-03; Pitfall 11 belt-and-suspenders) - db:migrate (drizzle-kit migrate); drizzle push never used (T-08-04, MariaDB unsafe) - pnpm --filter @familysync/api test: full DB-backed API test suite