diff --git a/.github/workflows/runtime-isolation-shadow.yml b/.github/workflows/runtime-isolation-shadow.yml
index d45aa30a..cfe7def4 100644
--- a/.github/workflows/runtime-isolation-shadow.yml
+++ b/.github/workflows/runtime-isolation-shadow.yml
@@ -123,7 +123,11 @@ jobs:
           set -euo pipefail
           python -m pip install --disable-pip-version-check uv==0.11.6
           uv sync --frozen --no-dev
-          uv pip install --no-deps -e external/QuantPlatformKit -e external/CryptoStrategies
+          uv pip install \
+            --python "$UV_PROJECT_ENVIRONMENT/bin/python" \
+            --no-deps \
+            -e external/QuantPlatformKit \
+            -e external/CryptoStrategies
 
       - name: Run current-runner fixed-input no-order replay
         env:
diff --git a/tests/test_runtime_isolation_shadow.py b/tests/test_runtime_isolation_shadow.py
index 082d77c5..afda5913 100644
--- a/tests/test_runtime_isolation_shadow.py
+++ b/tests/test_runtime_isolation_shadow.py
@@ -48,6 +48,7 @@ def test_shadow_workflow_is_manual_ephemeral_and_has_no_secret_capability(self)
         self.assertIn("if: ${{ inputs.include_current_runner }}", current_runner_shadow)
         self.assertIn("runs-on: self-hosted", current_runner_shadow)
         self.assertNotIn("environment:", current_runner_shadow)
+        self.assertIn('--python "$UV_PROJECT_ENVIRONMENT/bin/python"', current_runner_shadow)
         self.assertIn("contents: read", workflow)
         self.assertNotIn("id-token: write", workflow)
         self.assertNotIn("environment:", workflow)