diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml
index 03213976..0bd10bf7 100644
--- a/.github/workflows/checks.yaml
+++ b/.github/workflows/checks.yaml
@@ -500,6 +500,7 @@ jobs:
       - ensure-pinned-actions
       - js-test
       - js-build
+      - e2e-hermetic
       - js-api-compatibility
       - js-smoke-discover
       - js-smoke-test
@@ -532,6 +533,7 @@ jobs:
           check_result "ensure-pinned-actions" "${{ needs.ensure-pinned-actions.result }}"
           check_result "js-test" "${{ needs.js-test.result }}"
           check_result "js-build" "${{ needs.js-build.result }}"
+          check_result "e2e-hermetic" "${{ needs.e2e-hermetic.result }}"
           check_result "js-api-compatibility" "${{ needs.js-api-compatibility.result }}"
           check_result "js-smoke-discover" "${{ needs.js-smoke-discover.result }}"
           check_result "js-smoke-test" "${{ needs.js-smoke-test.result }}"
diff --git a/e2e/scenarios/openrouter-traces/scenario.test.ts b/e2e/scenarios/openrouter-traces/scenario.test.ts
index 48601ad5..07fcf75a 100644
--- a/e2e/scenarios/openrouter-traces/scenario.test.ts
+++ b/e2e/scenarios/openrouter-traces/scenario.test.ts
@@ -7,6 +7,7 @@ import {
   resolveScenarioDir,
   withScenarioHarness,
 } from "../../helpers/scenario-harness";
+import { E2E_TAGS } from "../../helpers/tags";
 
 const scenarioDir = await prepareScenarioDir({
   scenarioDir: resolveScenarioDir(import.meta.url),
@@ -86,6 +87,9 @@ function getAutoContract(): Promise<OpenRouterContract> {
 
 test(
   "wrap-openrouter-traces captures wrapper instrumentation",
+  {
+    tags: [E2E_TAGS.externalApi],
+  },
   async () => {
     const contract = await getWrapperContract();
 
@@ -98,6 +102,9 @@ test(
 
 test(
   "openrouter auto-instrumentation via node hook collects traces without manual wrapping",
+  {
+    tags: [E2E_TAGS.externalApi],
+  },
   async () => {
     const [wrapperContract, autoContract] = await Promise.all([
       getWrapperContract(),