Many imorovments

.gitea/workflows/traceability-check.yml

@@ -23,6 +23,10 @@ jobs:
   traceability:
     runs-on: linux/amd64
     name: Requirement traces
+    # Node for actions/checkout and actions/cache, which the bare runner image
+    # cannot execute. Rust is installed below.
+    container:
+      image: catthehacker/ubuntu:act-latest
 
     steps:
       - name: Checkout
@@ -39,6 +43,15 @@ jobs:
             target
           key: traces-${{ runner.os }}-${{ hashFiles('**/Cargo.lock') }}
 
+      # Source-comment and markdown parsing only, so the minimal profile is
+      # enough — no system libraries and no components beyond cargo itself.
+      - name: Install Rust 1.92.0
+        run: |
+          set -e
+          curl -fsSL https://sh.rustup.rs | sh -s -- \
+            -y --no-modify-path --profile minimal --default-toolchain 1.92.0
+          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
+
       # The gate's own arithmetic is the thing being trusted, so its tests run
       # before it does. Untested gate logic is exactly how JellyTau's 158% went
       # unnoticed for months.