diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4253dfe..cb221e9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -173,11 +173,7 @@ jobs:
   lume_macos_contract_trusted:
     name: lume macos contract
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
-    runs-on:
-      - self-hosted
-      - macOS
-      - ARM64
-      - xcode
+    runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
       - uses: actions/checkout@v6
diff --git a/test/workflow.test.ts b/test/workflow.test.ts
index d4fa439..10411d7 100644
--- a/test/workflow.test.ts
+++ b/test/workflow.test.ts
@@ -4,7 +4,6 @@ import YAML from "yaml";
 import { describe, expect, test } from "vitest";
 
 const shellSafePublicRunner = ["self-hosted", "linux", "shell-only", "public"];
-const macosXcodeRunner = ["self-hosted", "macOS", "ARM64", "xcode"];
 
 describe("CI workflow", () => {
   test("runs mutation testing in extended validation and uploads the report", () => {
@@ -291,7 +290,7 @@ describe("CI workflow", () => {
     expect(String(syntaxStep?.run)).toContain("docker/runner-entrypoint.ps1");
   });
 
-  test("keeps the Lume macOS pool contract on self-hosted macOS runners", () => {
+  test("keeps the Lume macOS pool contract on GitHub-hosted runners", () => {
     const workflow = YAML.parse(
       fs.readFileSync(path.resolve(".github/workflows/ci.yml"), "utf8")
     ) as {
@@ -310,7 +309,7 @@ describe("CI workflow", () => {
       (step) => step.name === "Validate Lume shell scripts"
     );
 
-    expect(lumeJob["runs-on"]).toEqual(macosXcodeRunner);
+    expect(lumeJob["runs-on"]).toBe("ubuntu-latest");
     expect(String(renderStep?.run)).toContain("pnpm validate-lume-config");
     expect(String(renderStep?.run)).toContain("pnpm render-lume-runner-manifest");
     expect(String(lifecycleStep?.run)).toContain("pnpm install-lume-project");