Expiry counts whole seconds, so a 1s access token, code or device code could lapse before a debug build's next request: 4 of 8 baseline runs failed at six different points. Lifetimes are now 5s (tokens, codes), 15s (refresh) and 10s (renewal), with the expiry checks' sleeps scaled to match. OIDC then passed in 12 of 12 runs.