diff --git a/Justfile b/Justfile
index 719b19dff7..37cac13a78 100644
--- a/Justfile
+++ b/Justfile
@@ -631,6 +631,8 @@ test-unit:
         cargo nextest run -p buzz-relay --lib -E 'test(/^invite_token::/) + test(/^config::invite_cutoff_tests::/)'
         # Retain partially consumed mesh receives across housekeeping ticks.
         cargo nextest run -p buzz-relay --lib -E 'test(=mesh_boot::tests::demo_echo_retains_pending_receive_across_housekeeping_ticks)'
+        # Durable session policy, fairness, timeout and scale contracts are infra-free.
+        cargo nextest run -p buzz-relay --lib -E 'test(/^state::live_authorization_tests::/)'
         # boot_lifecycle spawns the real relay binary and asserts its startup
         # lifecycle, including that buzz_startup_phase_* reaches /metrics. Its
         # non-ignored tests need no Postgres or Redis; the Postgres cases are
diff --git a/scripts/run-tests.sh b/scripts/run-tests.sh
index 59debc65cd..f513a5ad31 100755
--- a/scripts/run-tests.sh
+++ b/scripts/run-tests.sh
@@ -431,6 +431,9 @@ run_unit_tests() {
   run_test_step "buzz-relay mesh receive lifetime regression" \
     cargo test -p buzz-relay --lib mesh_boot::tests::demo_echo_retains_pending_receive_across_housekeeping_ticks -- --exact --nocapture
 
+  run_test_step "buzz-relay durable live authorization contracts" \
+    cargo test -p buzz-relay --lib state::live_authorization_tests:: -- --nocapture
+
   run_test_step "buzz-relay boot lifecycle tests" \
     cargo test -p buzz-relay --test boot_lifecycle -- --nocapture