Sync OSS release

Author: symbibot

crates/runtime/tests/performance_claims.rs

@@ -382,9 +382,12 @@ fn claim2_ecdsa_p256_verify_under_5ms() {
     println!("ECDSA P-256 verify only:");
     println!("  Average: {avg_us} µs ({avg_ms:.3} ms)");
 
+    // Debug builds are ~2× slower due to unoptimized crypto; use relaxed
+    // threshold in CI (debug) while keeping the real claim for release.
+    let threshold_ms = if cfg!(debug_assertions) { 10.0 } else { 5.0 };
     assert!(
-        avg_ms < 5.0,
-        "CLAIM VIOLATED: ECDSA verify {avg_ms:.3} ms >= 5 ms threshold"
+        avg_ms < threshold_ms,
+        "CLAIM VIOLATED: ECDSA verify {avg_ms:.3} ms >= {threshold_ms} ms threshold"
     );
 }