Run jobs on Windows runners (windows-* labels) under native pwsh. The pull-request windows job is the deliberate exception: it runs Windows Node under Wine on hosted Linux and blocks all checks passed; windows-native runs automatically on windows-2025 (or the self-hosted [self-hosted, dsh-win-ci, windows] pool under DSH_CI_FAILOVER=selfhosted) but reports independently. The master serial-windows standby continuously validates the self-hosted failover target — see the failover runbook.