diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2700b137..cfbc593a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,7 +25,12 @@ PyPI version — not the changelog header.
   aipass, commons — all 14 offenders now at 100%. **Fleet: 17/17 branches at
   100% seedgo compliance** (hooks, skills, devpulse were already compliant).
   Owners self-audited and self-fixed; devpulse verified every diff, re-ran each
-  branch's full test suite, and committed per wave.
+  branch's full test suite, and committed per wave. A full 17-branch test run
+  (~10,349 tests) surfaced one pre-existing flaky test in drone
+  (`test_pr_no_branch_dir` / `test_pr_no_args` lacked cwd isolation, so a real
+  checkout's findable passport made the auth path pass unexpectedly) — given
+  `monkeypatch.chdir(tmp_path)` isolation to match its sibling test, so the full
+  suite is now deterministically green.
 
 ### Fixed
 
diff --git a/src/aipass/drone/tests/test_git_module.py b/src/aipass/drone/tests/test_git_module.py
index 035d307b..21a0a95c 100644
--- a/src/aipass/drone/tests/test_git_module.py
+++ b/src/aipass/drone/tests/test_git_module.py
@@ -857,13 +857,15 @@ class TestGitModuleRouting:
         assert result["exit_code"] == 1
         assert "cannot detect" in result["stderr"].lower()
 
-    def test_pr_no_args(self) -> None:
+    def test_pr_no_args(self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
         """pr command without args fails (auth or usage)."""
+        monkeypatch.chdir(tmp_path)
         result = handle_command("pr")
         assert result["exit_code"] == 1
 
-    def test_pr_no_branch_dir(self) -> None:
+    def test_pr_no_branch_dir(self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> None:
         """pr command without passport returns auth error."""
+        monkeypatch.chdir(tmp_path)
         result = handle_command("pr", ["some description"])
         assert result["exit_code"] == 1