diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8a9de6be..c9fe6c84 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
   # covers Windows too.
   windows-build-test-package:
     needs: admission-policy
-    runs-on: windows-latest
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && 'ci-5070x-windows' || 'windows-latest' }}
     # Rust tests alone take ~16 min on Windows (#440).
     timeout-minutes: 45
 
@@ -103,7 +103,7 @@ jobs:
           - macos-latest
           - ubuntu-latest
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && (contains(fromJSON('["ubuntu-latest","ubuntu-24.04"]'), matrix.os) && 'ci-5070x-linux' || contains(fromJSON('["windows-latest","windows-2025"]'), matrix.os) && 'ci-5070x-windows') || matrix.os }}
     timeout-minutes: 30
     env:
       SMOKE_TAG: v0.0.0-smoketest
@@ -248,7 +248,7 @@ jobs:
     # #418: exercise release.yml's archive download contract without its
     # write token, provenance action, tag trigger, or release publication.
     needs: cross-platform-smoke
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && 'ci-5070x-linux' || 'ubuntu-latest' }}
     timeout-minutes: 10
     permissions:
       contents: read
diff --git a/.github/workflows/codegraph-conformance.yml b/.github/workflows/codegraph-conformance.yml
index 57d747d4..cdf8b0aa 100644
--- a/.github/workflows/codegraph-conformance.yml
+++ b/.github/workflows/codegraph-conformance.yml
@@ -26,7 +26,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && (contains(fromJSON('["ubuntu-latest","ubuntu-24.04"]'), matrix.os) && 'ci-5070x-linux' || contains(fromJSON('["windows-latest","windows-2025"]'), matrix.os) && 'ci-5070x-windows') || matrix.os }}
     timeout-minutes: 30
     env:
       DO_NOT_TRACK: '1'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 70c9beac..a8f051df 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -80,7 +80,7 @@ jobs:
           - macos-latest
           - ubuntu-latest
 
-    runs-on: ${{ matrix.os }}
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && (contains(fromJSON('["ubuntu-latest","ubuntu-24.04"]'), matrix.os) && 'ci-5070x-linux' || contains(fromJSON('["windows-latest","windows-2025"]'), matrix.os) && 'ci-5070x-windows') || matrix.os }}
 
     steps:
       - name: Checkout
diff --git a/.github/workflows/skill-check.yml b/.github/workflows/skill-check.yml
index a0a3b10a..b449a52c 100644
--- a/.github/workflows/skill-check.yml
+++ b/.github/workflows/skill-check.yml
@@ -22,7 +22,7 @@ jobs:
   # Run darwin-skill 8-dim scoring on every new/modified SKILL.md
   score-skills:
     name: Darwin score (8-dim)
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && 'ci-5070x-linux' || 'ubuntu-latest' }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -140,7 +140,7 @@ jobs:
   # Validate SKILL.md frontmatter (YAML)
   frontmatter-check:
     name: Frontmatter YAML validation
-    runs-on: ubuntu-latest
+    runs-on: ${{ vars.CI_5070X_ENABLED == 'true' && (((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/')) || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository)) && 'ci-5070x-linux' || 'ubuntu-latest' }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
diff --git a/.sentrux/baseline.json b/.sentrux/baseline.json
index 8427658b..a3522db4 100644
--- a/.sentrux/baseline.json
+++ b/.sentrux/baseline.json
@@ -154,30 +154,6 @@
       "path": "crates/code-intel-cli/tests/internalization_record.rs",
       "rule": "loc>800; functions>25&&loc>400"
     },
-    {
-      "functions": 100,
-      "loc": 2873,
-      "path": "legacy/Invoke-SentruxAgentTool.ps1",
-      "rule": "loc>800; functions>25&&loc>400"
-    },
-    {
-      "functions": 44,
-      "loc": 1410,
-      "path": "legacy/install-code-intel-pipeline.ps1",
-      "rule": "loc>800; functions>25&&loc>400"
-    },
-    {
-      "functions": 92,
-      "loc": 4834,
-      "path": "legacy/run-code-intel.ps1",
-      "rule": "loc>800; functions>25&&loc>400"
-    },
-    {
-      "functions": 13,
-      "loc": 1318,
-      "path": "legacy/scripts/tests/test-regression-fixes.ps1",
-      "rule": "loc>800"
-    },
     {
       "functions": 28,
       "loc": 801,
@@ -193,7 +169,7 @@
     "cycle_count": 0,
     "files": 403,
     "functions": 5247,
-    "god_file_count": 30,
+    "god_file_count": 26,
     "import_modeled_files": 338,
     "max_complexity": 80,
     "quality_signal": 6631,