v1.1.1: mirror CI hardening