warning: in the working copy of 'crates/spt/tests/active_only_never_relay_e2e.rs', LF will be replaced by CRLF the next time Git touches it
warning: in the working copy of 'crates/spt/tests/broker_stop_endpoint_deny_e2e.rs', LF will be replaced by CRLF the next time Git touches it
warning: in the working copy of 'crates/spt/tests/release_verify_e2e.rs', LF will be replaced by CRLF the next time Git touches it
diff --git a/crates/spt/tests/active_only_never_relay_e2e.rs b/crates/spt/tests/active_only_never_relay_e2e.rs
index db79999..fc58bf0 100644
--- a/crates/spt/tests/active_only_never_relay_e2e.rs
+++ b/crates/spt/tests/active_only_never_relay_e2e.rs
@@ -32,7 +32,12 @@ use spt_store::perch;
 static E2E_LOCK: Mutex<()> = Mutex::new(());
 
 /// `spt send <args>` with `body` on stdin, bounded off-thread so a hang fails loud.
-fn send_bounded(spt_bin: &std::path::Path, home: &std::path::Path, args: &[&str], body: &str) -> Output {
+fn send_bounded(
+    spt_bin: &std::path::Path,
+    home: &std::path::Path,
+    args: &[&str],
+    body: &str,
+) -> Output {
     let mut child = Command::new(spt_bin)
         .no_window()
         .args(args)
@@ -61,7 +66,9 @@ fn send_bounded(spt_bin: &std::path::Path, home: &std::path::Path, args: &[&str]
 /// `default` send resolves it to the WAN leg (there is no local perch).
 fn seed_remote_only(subnet: &str, id: &str) {
     let mut store = spt_store::subnet::SubnetStore::load();
-    store.create_subnet(subnet, spt_store::access::Mode::Open).expect("seed subnet");
+    store
+        .create_subnet(subnet, spt_store::access::Mode::Open)
+        .expect("seed subnet");
     store.save().expect("save subnets");
 
     let dir = perch::identity_dir().join("registry");
@@ -109,7 +116,12 @@ fn cross_node_active_only_stays_local_only_never_wan() {
     seed_remote_only("s1", "remotegw");
 
     // ── active_only: must refuse LOCAL-ONLY, never attempt WAN. ──
-    let ao = send_bounded(&spt_bin, home.path(), &["send", "--active-only", "remotegw"], "background ctx");
+    let ao = send_bounded(
+        &spt_bin,
+        home.path(),
+        &["send", "--active-only", "remotegw"],
+        "background ctx",
+    );
     let ao_err = String::from_utf8_lossy(&ao.stderr);
     let ao_out = String::from_utf8_lossy(&ao.stdout);
     assert!(
@@ -121,7 +133,11 @@ fn cross_node_active_only_stays_local_only_never_wan() {
         !ao_out.contains("SENT(WAN)") && !ao_err.contains("SENT(WAN)"),
         "active_only must NEVER be sent over the WAN.\nstdout=\n{ao_out}\nstderr=\n{ao_err}"
     );
-    assert_ne!(ao.status.code(), Some(0), "the local-only refusal is a non-zero exit");
+    assert_ne!(
+        ao.status.code(),
+        Some(0),
+        "the local-only refusal is a non-zero exit"
+    );
 
     // ── default contrast: the SAME target DOES take the WAN leg (proving the guard
     //    is active_only-specific). It fails the dial (no broker) but reached WAN. ──
diff --git a/crates/spt/tests/broker_stop_endpoint_deny_e2e.rs b/crates/spt/tests/broker_stop_endpoint_deny_e2e.rs
index d6e36a1..8660185 100644
--- a/crates/spt/tests/broker_stop_endpoint_deny_e2e.rs
+++ b/crates/spt/tests/broker_stop_endpoint_deny_e2e.rs
@@ -132,10 +132,7 @@ fn an_endpoint_context_cannot_stop_the_broker_by_any_flag() {
         );
 
         // ── Leg 1: EVERY flag combination refuses, daemon survives each. ────
-        for args in [
-            &["daemon", "stop"][..],
-            &["daemon", "stop", "--force"][..],
-        ] {
+        for args in [&["daemon", "stop"][..], &["daemon", "stop", "--force"][..]] {
             let (code, err) = as_endpoint(home, args);
             assert_ne!(code, 0, "{args:?} must not succeed for an endpoint: {err}");
             assert!(
@@ -173,7 +170,10 @@ fn an_endpoint_context_cannot_stop_the_broker_by_any_flag() {
             err.contains("UPDATE_FINISH_REFUSED"),
             "the finish leg refuses for an endpoint: {err}"
         );
-        assert!(daemon_running(home), "the daemon survives the finish attempt");
+        assert!(
+            daemon_running(home),
+            "the daemon survives the finish attempt"
+        );
 
         // ── Leg 4: CONTEXT-scoped, not global. Same binary, same home, no
         // endpoint marker ⇒ the human contract still works. Without this the
diff --git a/crates/spt/tests/release_verify_e2e.rs b/crates/spt/tests/release_verify_e2e.rs
index 9876968..d7c78a1 100644
--- a/crates/spt/tests/release_verify_e2e.rs
+++ b/crates/spt/tests/release_verify_e2e.rs
@@ -65,7 +65,10 @@ fn published_release_verifies_against_embedded_anchor() {
             ])
             .status()
             .expect("run gh (installed + authed on the release-e2e runner)");
-        assert!(st.success(), "gh release download {asset} from {repo}@{tag}");
+        assert!(
+            st.success(),
+            "gh release download {asset} from {repo}@{tag}"
+        );
         let dest = tmp.path().join(asset);
 
         let raw = std::fs::read_to_string(&dest).unwrap();