diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 59519e3..2d06eaf 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest]
+        os: [namespace-profile-vig, macos-latest]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v7
@@ -33,7 +33,7 @@ jobs:
 
   ui:
     name: ui
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     defaults:
       run:
         working-directory: apps/microbridge-ui
@@ -52,7 +52,7 @@ jobs:
 
   adapters:
     name: adapters
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: actions/checkout@v7
         with:
diff --git a/.github/workflows/coderabbit-fallback-review.yml b/.github/workflows/coderabbit-fallback-review.yml
index 5e4b199..a7350e1 100644
--- a/.github/workflows/coderabbit-fallback-review.yml
+++ b/.github/workflows/coderabbit-fallback-review.yml
@@ -55,7 +55,7 @@ jobs:
   fallback:
     name: Decide Codex fallback
     if: github.event_name != 'issue_comment' || github.event.issue.pull_request
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
diff --git a/.github/workflows/finalize-release.yml b/.github/workflows/finalize-release.yml
index 9636731..3e3dd22 100644
--- a/.github/workflows/finalize-release.yml
+++ b/.github/workflows/finalize-release.yml
@@ -15,7 +15,7 @@ jobs:
       github.event.pull_request.merged == true &&
       github.event.pull_request.base.ref == 'main' &&
       startsWith(github.event.pull_request.head.ref, 'chore/brew-v')
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     outputs:
       tag: ${{ steps.release.outputs.tag }}
       version: ${{ steps.release.outputs.version }}
@@ -123,7 +123,7 @@ jobs:
   promote:
     name: promote verified release
     needs: [resolve, public-install]
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     permissions:
       contents: write
     steps:
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index 357f074..16dd40a 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -13,7 +13,7 @@ permissions:
 jobs:
   lint:
     name: conventional title
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: amannn/action-semantic-pull-request@v5
         env:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b46a1e0..52f7a1c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -21,7 +21,7 @@ jobs:
             target: aarch64-apple-darwin
           - os: macos-latest
             target: x86_64-apple-darwin
-          - os: ubuntu-latest
+          - os: namespace-profile-vig
             target: x86_64-unknown-linux-gnu
     steps:
       - uses: actions/checkout@v7
@@ -243,7 +243,7 @@ jobs:
   assemble-assets:
     name: assemble release assets
     needs: [build, build-ui-macos]
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: actions/checkout@v7
       - uses: actions/download-artifact@v8
@@ -335,7 +335,7 @@ jobs:
   publish:
     name: publish prerelease assets
     needs: [assemble-assets, formula-smoke-prepublish]
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: actions/download-artifact@v8
         with:
@@ -385,7 +385,7 @@ jobs:
   prepare-formula:
     name: prepare Homebrew formula
     needs: publish
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: actions/checkout@v7
         with:
@@ -426,7 +426,7 @@ jobs:
   bump-formula:
     name: open Homebrew formula PR
     needs: [publish, formula-smoke-public-assets]
-    runs-on: ubuntu-latest
+    runs-on: namespace-profile-vig
     steps:
       - uses: actions/checkout@v7
         with: