diff --git a/package.json b/package.json
index fe1e08552..958df729c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@vypdev/copilot",
-  "version": "3.10.1",
+  "version": "3.10.2",
   "packageManager": "pnpm@10.12.4",
   "pnpm": {
     "overrides": {
diff --git a/src/infrastructure/__tests__/native_verification_runner.test.ts b/src/infrastructure/__tests__/native_verification_runner.test.ts
index 9bbe278b9..2a4cb49e2 100644
--- a/src/infrastructure/__tests__/native_verification_runner.test.ts
+++ b/src/infrastructure/__tests__/native_verification_runner.test.ts
@@ -6,6 +6,15 @@ import { runVerifyCommands } from '../../application/usecases/steps/commit/bugbo
 import { writeNativeRecord } from '../native_verification_protocol';
 import { nativeVerificationFixture, COMPOSITE } from './native_verification_fixture';
 
+// Keep ACL process startup out of this protocol suite's five-second test budget.
+// Real Windows permissions are covered by agent_windows_runtime.test.ts and the
+// native platform smoke test; profiles, environment filtering and Git stay real.
+jest.mock('../agents/windows_runtime_acl', () => ({
+    ...jest.requireActual<typeof import('../agents/windows_runtime_acl')>('../agents/windows_runtime_acl'),
+    makeWindowsRuntimePathPrivate: jest.fn(),
+    verifyWindowsAgentExecutableAcl: jest.fn(),
+}));
+
 // The test driver supplies native runner results; production never interprets YAML.
 describe('native verification boundary', () => {
     let f: ReturnType<typeof nativeVerificationFixture>;