diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3535a81..fdca93d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -85,6 +85,11 @@ jobs:
     if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     needs: rust
+    # This fork forbids headless by default (always-headed for stealth), but CI
+    # runners have no display. Opt into the documented display-less escape so
+    # launched Chrome can start; e2e tests exercise functionality, not stealth.
+    env:
+      AGENT_BROWSER_ALLOW_HEADLESS: "1"
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
@@ -112,6 +117,10 @@ jobs:
     if: github.event_name != 'pull_request'
     runs-on: windows-latest
     needs: rust-cross
+    # Headless-forbidden fork on a headless CI runner — opt into the escape so
+    # `agent-browser open` can launch Chrome.
+    env:
+      AGENT_BROWSER_ALLOW_HEADLESS: "1"
 
     steps:
       - name: Checkout repository