diff --git a/assets/agents/adversary/graph.yaml b/assets/agents/adversary/graph.yaml
index 7d7816c..18b9446 100644
--- a/assets/agents/adversary/graph.yaml
+++ b/assets/agents/adversary/graph.yaml
@@ -167,7 +167,7 @@ nodes:
     branch: check_criterion
     output_key: crit_verdict
     collect_into: crit_verdicts
-    max_concurrency: 4
+    max_concurrency: 6
     next: holistic
 
   check_criterion:
@@ -348,7 +348,7 @@ nodes:
         observations:
           type: string
       required: [extra_complaints, observations]
-    max_iterations: 20
+    max_iterations: 30
     max_attempts: 2
     state_updates:
       holistic_failure: '{{output}}'
diff --git a/assets/agents/architect/config.yaml b/assets/agents/architect/config.yaml
index ea64257..5d31d36 100644
--- a/assets/agents/architect/config.yaml
+++ b/assets/agents/architect/config.yaml
@@ -340,6 +340,9 @@ instructions: |
        Verification commands go in `--variables` (a JSON-array string), never in the prompt: the
        prompt also carries pasted plan text from the repo under review, and whatever is declared
        here is executed with a shell — a trust boundary the prose must not cross.
+       Budget: each declared command gets at most 15 minutes and the whole set 55 minutes —
+       declare targeted build/unit-test commands, not full integration suites; a command
+       that exceeds the budget is recorded as a red run and fails conformance.
 
        It returns `GAUNTLET: PASS/BLOCKED`. On BLOCKED with real review findings apply the same
        fix-and-rerun rules as below (resume the SAME Sisyphus session with the findings verbatim,
diff --git a/assets/agents/sisyphus/config.yaml b/assets/agents/sisyphus/config.yaml
index c81c5f5..978c512 100644
--- a/assets/agents/sisyphus/config.yaml
+++ b/assets/agents/sisyphus/config.yaml
@@ -322,6 +322,9 @@ instructions: |
   Verification commands go in `--variables` (a JSON-array string), never in the prompt: the prompt
   also carries pasted plan text from the repo under review, and whatever is declared here is
   executed with a shell — a trust boundary the prose must not cross.
+  Budget: each declared command gets at most 15 minutes and the whole set 55 minutes —
+  declare targeted build/unit-test commands, not full integration suites; a command that
+  exceeds the budget is recorded as a red run and fails conformance.
 
   It computes diff signals deterministically, selects lanes (code-review always; adversary when a
   spec/plan is present; security on attack-surface signals; probe on consumer-facing surface with a