diff --git a/tests/ci/agent-security-hardening-skill.test.js b/tests/ci/agent-security-hardening-skill.test.js
index e4e4f0460..b5deac513 100644
--- a/tests/ci/agent-security-hardening-skill.test.js
+++ b/tests/ci/agent-security-hardening-skill.test.js
@@ -55,6 +55,7 @@ function classify(python, requests) {
     const result = spawnSync(python, ["-c", HARNESS, workspace, JSON.stringify(requests)], {
       input: workspacePathSnippet(),
       encoding: "utf8",
+      env: { ...process.env, PYTHONIOENCODING: "utf-8", PYTHONUTF8: "1" },
     });
     assert.strictEqual(result.status, 0, `python harness failed:\n${result.stderr}`);
     return JSON.parse(result.stdout);
diff --git a/tests/ci/context-profiles.test.js b/tests/ci/context-profiles.test.js
index 21b3f9f61..0d02632a3 100644
--- a/tests/ci/context-profiles.test.js
+++ b/tests/ci/context-profiles.test.js
@@ -9,7 +9,7 @@ const SCRIPT = path.join(ROOT, 'scripts/ci/validate-context-profiles.js');
 const tests = [
   ['validates every profile against every declared target in read-only mode', () => {
     const result = spawnSync(process.execPath, [SCRIPT, '--json'], {
-      cwd: ROOT, encoding: 'utf8', timeout: 30_000,
+      cwd: ROOT, encoding: 'utf8', timeout: 60_000,
     });
     assert.strictEqual(result.status, 0, result.stderr);
     const output = JSON.parse(result.stdout);