diff --git a/.changeset/maestro-ci-hardening.md b/.changeset/maestro-ci-hardening.md
new file mode 100644
index 00000000000..a845151cc84
--- /dev/null
+++ b/.changeset/maestro-ci-hardening.md
@@ -0,0 +1,2 @@
+---
+---
diff --git a/.github/workflows/expo-native-build.yml b/.github/workflows/expo-native-build.yml
index ce6a95119b6..4c2fab8d0df 100644
--- a/.github/workflows/expo-native-build.yml
+++ b/.github/workflows/expo-native-build.yml
@@ -1,4 +1,4 @@
-name: 'Expo native (@clerk/expo)'
+name: Expo
 
 on:
   pull_request:
@@ -27,12 +27,15 @@ env:
   SDK_PACK_DIR: /tmp/clerk-expo-pack
   E2E_INSTANCE_NAME: clerkstage-with-native-components
   BAPI_URL: https://api.clerkstage.dev
-  MAESTRO_VERSION: '2.8.0'
+  MAESTRO_VERSION: '2.10.0'
+  MAESTRO_CLI_NO_ANALYTICS: '1'
+  MAESTRO_SHARDS: '2'
+  MAESTRO_DRIVER_STARTUP_TIMEOUT: '180000'
 
 jobs:
   native-build:
     if: ${{ github.head_ref != 'changeset-release/main' }}
-    name: Expo ${{ matrix.expo-sdk }} ${{ matrix.run-e2e == true && 'Build + E2E' || 'Build' }} / ${{ matrix.platform }}
+    name: Native ${{ matrix.run-e2e == true && 'E2E' || 'Build' }} (${{ matrix.platform }}, sdk ${{ matrix.expo-sdk }})
     runs-on: ${{ matrix.runner }}
     timeout-minutes: ${{ matrix.run-e2e == true && 60 || 45 }}
     strategy:
@@ -223,6 +226,10 @@ jobs:
           path: ${{ steps.native-build-key.outputs.artifact }}
           key: ${{ steps.native-build-cache.outputs.cache-primary-key }}
 
+      - name: Boot iOS simulators
+        if: matrix.platform == 'ios' && matrix.run-e2e == true
+        run: ${{ env.E2E_DIR }}/boot-ios-simulators.sh boot "$MAESTRO_SHARDS"
+
       - name: Cache maestro CLI
         if: steps.keys.outputs.pk != ''
         uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
@@ -233,29 +240,17 @@ jobs:
       - name: Install maestro CLI
         if: steps.keys.outputs.pk != ''
         run: |
-          set -o pipefail
           if [ -x "$HOME/.maestro/bin/maestro" ]; then
             echo "Using cached Maestro"
           else
-            installed=0
-            for i in 1 2 3; do
-              if curl -fLs --retry 3 --retry-delay 5 "https://get.maestro.mobile.dev" | MAESTRO_VERSION="$MAESTRO_VERSION" bash; then
-                if [ -x "$HOME/.maestro/bin/maestro" ]; then installed=1; break; fi
-              fi
-              echo "Maestro install attempt $i failed (or binary missing); retrying"
-              sleep 5
-            done
-            [ "$installed" = 1 ] || { echo "::error::Maestro install failed after 3 attempts"; exit 1; }
+            archive="$RUNNER_TEMP/maestro.zip"
+            curl -fLs --retry 3 --retry-delay 5 -o "$archive" \
+              "https://github.com/mobile-dev-inc/Maestro/releases/download/cli-$MAESTRO_VERSION/maestro.zip"
+            unzip -q "$archive" -d "$RUNNER_TEMP/maestro-dist"
+            mv "$RUNNER_TEMP/maestro-dist/maestro" "$HOME/.maestro"
           fi
           echo "$HOME/.maestro/bin" >> "$GITHUB_PATH"
-          "$HOME/.maestro/bin/maestro" --version
-
-      - name: Boot iOS simulator
-        id: sim
-        if: matrix.platform == 'ios' && steps.keys.outputs.pk != ''
-        uses: futureware-tech/simulator-action@e89aa8f93d3aec35083ff49d2854d07f7186f7f5 # v5
-        with:
-          model: 'iPhone 17 Pro'
+          test "$("$HOME/.maestro/bin/maestro" --version)" = "$MAESTRO_VERSION"
 
       # Provisioned as late as possible so live credentials exist for the
       # shortest window.
@@ -293,35 +288,21 @@ jobs:
         env:
           CLERK_TEST_EMAIL: ${{ steps.user.outputs.email }}
           CLERK_TEST_PASSWORD: ${{ steps.user.outputs.password }}
-          SIM_UDID: ${{ steps.sim.outputs.udid }}
         run: |
-          echo "Using simulator $SIM_UDID"
-          # Kill animations + predictive keyboard: animations add latency to
-          # every tap; predictive text hijacks inputText targets.
-          xcrun simctl spawn "$SIM_UDID" defaults write com.apple.UIKit UIAnimationDragCoefficient -float 0.01 || true
-          xcrun simctl spawn "$SIM_UDID" defaults write -g ApplePersistenceIgnoreState -bool YES || true
-          xcrun simctl spawn "$SIM_UDID" defaults write com.apple.keyboard.ContinuousPath -bool NO || true
-          xcrun simctl spawn "$SIM_UDID" defaults write com.apple.keyboard.AutoCapitalization -bool NO || true
-          xcrun simctl spawn "$SIM_UDID" defaults write com.apple.keyboard.AutoCorrection -bool NO || true
-          xcrun simctl spawn "$SIM_UDID" defaults write com.apple.keyboard.Prediction -bool NO || true
-          # The one-time keyboard tutorial sheets carry their own Continue
-          # button, which can hijack taps on the AuthView's Continue.
-          for key in DidShowContinuousPathIntroduction DidShowGestureKeyboardIntroduction KeyboardDidShowProductivityTutorial UIKeyboardDidShowInternationalInfoIntroduction; do
-            xcrun simctl spawn "$SIM_UDID" defaults write com.apple.keyboard.preferences "$key" -bool YES || true
-          done
-          xcrun simctl install "$SIM_UDID" ios/build/Build/Products/Release-iphonesimulator/ClerkExpoNativeBuildFixture.app
-          # Stream the app's console output into the debug artifact so a hang has
-          # actionable evidence (keychain/network errors) instead of just screenshots.
+          "$GITHUB_WORKSPACE/$E2E_DIR/boot-ios-simulators.sh" wait
           mkdir -p "$RUNNER_TEMP/maestro-debug"
-          xcrun simctl spawn "$SIM_UDID" log stream --style compact \
-            --predicate 'processImagePath CONTAINS "ClerkExpoNativeBuildFixture"' \
-            > "$RUNNER_TEMP/maestro-debug/sim-console.log" 2>&1 &
-          LOG_PID=$!
-          cd "$GITHUB_WORKSPACE/$E2E_DIR"
+          log_pids=()
+          for udid in ${MAESTRO_UDID//,/ }; do
+            xcrun simctl install "$udid" ios/build/Build/Products/Release-iphonesimulator/ClerkExpoNativeBuildFixture.app
+            xcrun simctl spawn "$udid" log stream --style compact \
+              --predicate 'processImagePath CONTAINS "ClerkExpoNativeBuildFixture"' \
+              > "$RUNNER_TEMP/maestro-debug/$udid-console.log" 2>&1 &
+            log_pids+=($!)
+          done
           rc=0
-          MAESTRO_DEBUG_OUTPUT="$RUNNER_TEMP/maestro-debug" ./run-flows.sh \
-            xcrun simctl terminate "$SIM_UDID" com.clerk.exponativebuildfixture || rc=$?
-          kill "$LOG_PID" 2>/dev/null || true
+          PLATFORM=ios MAESTRO_DEBUG_OUTPUT="$RUNNER_TEMP/maestro-debug" \
+            "$GITHUB_WORKSPACE/$E2E_DIR/run-flows.sh" || rc=$?
+          kill "${log_pids[@]}" 2>/dev/null || true
           exit "$rc"
 
       - name: Enable KVM
@@ -365,7 +346,8 @@ jobs:
           target: google_apis
           arch: x86_64
           force-avd-creation: false
-          emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim
+          # read-only: a writable instance holds a lock the shard emulators wait on forever
+          emulator-options: -read-only -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim
           disable-animations: true
           # The action runs each script line in a separate sh -c; the folded
           # scalar (>-) plus && keeps everything in one shell invocation.
@@ -386,9 +368,11 @@ jobs:
             -H "Authorization: Bearer $CLERK_SECRET_KEY" || true
 
       # Test reports record flow env (and typed input) in plaintext;
-      # add-mask only covers step logs, not artifact contents.
+      # add-mask only covers step logs, not artifact contents. Must run whenever
+      # the upload does, or a passing run uploads the password.
       - name: Scrub test credentials from Maestro debug output
-        if: always() && (steps.run_e2e_ios.outcome == 'failure' || steps.run_e2e_android.outcome == 'failure')
+        id: scrub
+        if: always() && steps.user.outputs.user_id != ''
         env:
           CLERK_TEST_PASSWORD: ${{ steps.user.outputs.password }}
         run: |
@@ -399,12 +383,13 @@ jobs:
             \( -name '*.html' -o -name '*.json' -o -name '*.log' -o -name '*.txt' -o -name '*.xml' -o -name '*.yaml' \) \
             -exec perl -pi -e 's/\Q$ENV{CLERK_TEST_PASSWORD}\E/[REDACTED]/g' {} +
 
-      - name: Upload Maestro artifacts on e2e failure
-        if: always() && (steps.run_e2e_ios.outcome == 'failure' || steps.run_e2e_android.outcome == 'failure')
+      - name: Upload Maestro artifacts
+        if: always() && steps.scrub.outcome == 'success'
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: maestro-${{ matrix.platform }}
           path: ${{ runner.temp }}/maestro-debug
+          if-no-files-found: warn
           retention-days: 7
 
       - name: Report e2e outcome
diff --git a/integration/templates/expo-native/App.tsx b/integration/templates/expo-native/App.tsx
index 78fef6a0ea8..11d3670243a 100644
--- a/integration/templates/expo-native/App.tsx
+++ b/integration/templates/expo-native/App.tsx
@@ -17,6 +17,7 @@ function NativeBuildFixture() {
   const { user } = useUser();
   const [isAuthOpen, setIsAuthOpen] = useState(false);
   const [isProfileOpen, setIsProfileOpen] = useState(false);
+  const [signOutResult, setSignOutResult] = useState<string | null>(null);
 
   if (isProfileOpen) {
     return (
@@ -56,6 +57,7 @@ function NativeBuildFixture() {
 
       <Text testID='auth-state'>{isLoaded ? `signed ${isSignedIn ? 'in' : 'out'}` : 'loading'}</Text>
       {user?.id && <Text testID='user-id'>{user.id}</Text>}
+      {signOutResult && <Text testID='sign-out-result'>{`sign out: ${signOutResult}`}</Text>}
       <Button
         testID='open-auth-view-button'
         title='Open native AuthView'
@@ -73,7 +75,14 @@ function NativeBuildFixture() {
         <Button
           testID='sign-out-button'
           title='Sign out'
-          onPress={() => void signOut()}
+          onPress={() => {
+            setSignOutResult('pending');
+            signOut().then(
+              () => setSignOutResult('ok'),
+              (error: unknown) =>
+                setSignOutResult((error instanceof Error ? error.message : String(error)).replace(/\s+/g, ' ')),
+            );
+          }}
         />
       )}
 
diff --git a/integration/tests/expo-native/boot-ios-simulators.sh b/integration/tests/expo-native/boot-ios-simulators.sh
new file mode 100755
index 00000000000..139335fd1b3
--- /dev/null
+++ b/integration/tests/expo-native/boot-ios-simulators.sh
@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+# Usage: ./boot-ios-simulators.sh boot <count> [model] | wait
+set -euo pipefail
+
+boot() {
+  local count=$1 model=${2:-iPhone 17 Pro}
+  local runtime device_type udids=() i
+  # pinned to the SDK the app was built with; runners may also carry a newer beta runtime
+  sdk=$(xcrun --sdk iphonesimulator --show-sdk-version)
+  runtime=$(xcrun simctl list runtimes available -j | jq -r --arg v "$sdk" \
+    '[.runtimes[] | select(.platform == "iOS")] | (map(select(.version == $v)) + .) | first | .identifier')
+  device_type=$(xcrun simctl list devicetypes -j | jq -r --arg m "$model" '.devicetypes[] | select(.name == $m) | .identifier')
+  for i in $(seq 1 "$count"); do
+    udids+=("$(xcrun simctl create "$model $i" "$device_type" "$runtime")")
+    xcrun simctl boot "${udids[$((i - 1))]}"
+  done
+  MAESTRO_UDID=$(IFS=,; echo "${udids[*]}")
+  echo "Booting $count x $model on $runtime: $MAESTRO_UDID"
+  if [ -n "${GITHUB_ENV:-}" ]; then echo "MAESTRO_UDID=$MAESTRO_UDID" >> "$GITHUB_ENV"; fi
+}
+
+wait_ready() {
+  local udid key
+  IFS=, read -r -a udids <<< "${MAESTRO_UDID:?MAESTRO_UDID is required}"
+  for udid in "${udids[@]}"; do
+    xcrun simctl bootstatus "$udid" -b &
+    local pid=$! elapsed=0
+    while kill -0 "$pid" 2>/dev/null; do
+      if [ "$elapsed" -ge 240 ]; then
+        kill "$pid" 2>/dev/null || true
+        wait "$pid" 2>/dev/null || true
+        echo "::error::$udid did not finish booting within ${elapsed}s"
+        xcrun simctl list devices -j | jq -r --arg u "$udid" '.devices[][] | select(.udid == $u) | "\(.name): \(.state)"'
+        return 1
+      fi
+      sleep 5
+      elapsed=$((elapsed + 5))
+    done
+    wait "$pid"
+    xcrun simctl spawn "$udid" defaults write com.apple.UIKit UIAnimationDragCoefficient -float 0.01 || true
+    xcrun simctl spawn "$udid" defaults write -g ApplePersistenceIgnoreState -bool YES || true
+    xcrun simctl spawn "$udid" defaults write com.apple.keyboard.ContinuousPath -bool NO || true
+    xcrun simctl spawn "$udid" defaults write com.apple.keyboard.AutoCapitalization -bool NO || true
+    xcrun simctl spawn "$udid" defaults write com.apple.keyboard.AutoCorrection -bool NO || true
+    xcrun simctl spawn "$udid" defaults write com.apple.keyboard.Prediction -bool NO || true
+    # the keyboard tutorial sheets have their own Continue button that steals taps
+    for key in DidShowContinuousPathIntroduction DidShowGestureKeyboardIntroduction KeyboardDidShowProductivityTutorial UIKeyboardDidShowInternationalInfoIntroduction; do
+      xcrun simctl spawn "$udid" defaults write com.apple.keyboard.preferences "$key" -bool YES || true
+    done
+  done
+}
+
+case "${1:-}" in
+  boot) boot "${2:?count is required}" "${3:-}" ;;
+  wait) wait_ready ;;
+  *) echo "usage: $0 boot <count> [model] | wait" >&2; exit 2 ;;
+esac
diff --git a/integration/tests/expo-native/flows/session-persists-across-restart.yaml b/integration/tests/expo-native/flows/session-persists-across-restart.yaml
deleted file mode 100644
index 95d8c900f6d..00000000000
--- a/integration/tests/expo-native/flows/session-persists-across-restart.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-# Sign in via the native AuthView, restart WITHOUT clearing state, and assert
-# the session is restored from secure-store with no re-auth (bridge + token
-# cache persistence).
-appId: com.clerk.exponativebuildfixture
-name: Session persists across app restart
----
-- runFlow: subflows/open-app.yaml
-- tapOn:
-    id: 'open-auth-view-button'
-- runFlow: subflows/sign-in-email-password.yaml
-- runFlow: subflows/assert-signed-in.yaml
-- stopApp
-- launchApp
-- extendedWaitUntil:
-    visible: 'signed in'
-    timeout: 45000
-- assertVisible:
-    id: 'user-id'
-# Leave the app signed out for whichever flow runs next.
-- tapOn:
-    id: 'sign-out-button'
-- runFlow: subflows/assert-signed-out.yaml
diff --git a/integration/tests/expo-native/flows/sign-in.yaml b/integration/tests/expo-native/flows/sign-in.yaml
index 80645825691..19aeba4c21a 100644
--- a/integration/tests/expo-native/flows/sign-in.yaml
+++ b/integration/tests/expo-native/flows/sign-in.yaml
@@ -1,13 +1,19 @@
-# Native AuthView email+password sign-in, asserting the native->JS session
-# sync, then JS-side sign-out asserting the reverse direction.
+# Native sign-in observed by JS, kept across a restart without clearing state, then JS sign-out.
 appId: com.clerk.exponativebuildfixture
-name: Native AuthView sign-in syncs to JS
+name: Native AuthView sign-in syncs to JS and survives a restart
 ---
 - runFlow: subflows/open-app.yaml
 - tapOn:
     id: 'open-auth-view-button'
 - runFlow: subflows/sign-in-email-password.yaml
 - runFlow: subflows/assert-signed-in.yaml
+- stopApp
+- launchApp
+- extendedWaitUntil:
+    visible: 'signed in'
+    timeout: 45000
+- assertVisible:
+    id: 'user-id'
 - tapOn:
     id: 'sign-out-button'
 - runFlow: subflows/assert-signed-out.yaml
diff --git a/integration/tests/expo-native/flows/subflows/_warmup.yaml b/integration/tests/expo-native/flows/subflows/_warmup.yaml
index bde6f57e9f3..6c880b05805 100644
--- a/integration/tests/expo-native/flows/subflows/_warmup.yaml
+++ b/integration/tests/expo-native/flows/subflows/_warmup.yaml
@@ -3,10 +3,14 @@
 # flake its in-flow waits. Excluded from the per-flow loop (lives in subflows/).
 appId: com.clerk.exponativebuildfixture
 ---
-- launchApp:
-    clearState: true
-    clearKeychain: true
-- extendedWaitUntil:
-    visible:
-      id: 'auth-state'
-    timeout: 90000
+# Android can kill a fresh launch when pm clear's task removal lands after am start.
+- retry:
+    maxRetries: 1
+    commands:
+      - launchApp:
+          clearState: true
+          clearKeychain: true
+      - extendedWaitUntil:
+          visible:
+            id: 'auth-state'
+          timeout: 90000
diff --git a/integration/tests/expo-native/flows/subflows/open-app.yaml b/integration/tests/expo-native/flows/subflows/open-app.yaml
index 681f2d289c4..308bc4836f9 100644
--- a/integration/tests/expo-native/flows/subflows/open-app.yaml
+++ b/integration/tests/expo-native/flows/subflows/open-app.yaml
@@ -1,13 +1,17 @@
 # Subflow: launch from a clean state and land signed out.
 appId: com.clerk.exponativebuildfixture
 ---
-- launchApp:
-    clearState: true
-    clearKeychain: true
-- extendedWaitUntil:
-    visible:
-      id: 'auth-state'
-    timeout: 30000
+# Android can kill a fresh launch when pm clear's task removal lands after am start.
+- retry:
+    maxRetries: 1
+    commands:
+      - launchApp:
+          clearState: true
+          clearKeychain: true
+      - extendedWaitUntil:
+          visible:
+            id: 'auth-state'
+          timeout: 30000
 # Text-only matching from here on: iOS failed combined id+text filters on RN
 # Text elements in CI while id-only and text-only both match. Also wait out
 # clerk-js init ('loading') with a retrying wait; assertVisible never retries.
diff --git a/integration/tests/expo-native/flows/subflows/sign-in-email-password.yaml b/integration/tests/expo-native/flows/subflows/sign-in-email-password.yaml
index 704f8b26f07..17b4f364ac9 100644
--- a/integration/tests/expo-native/flows/subflows/sign-in-email-password.yaml
+++ b/integration/tests/expo-native/flows/subflows/sign-in-email-password.yaml
@@ -45,7 +45,7 @@ appId: com.clerk.exponativebuildfixture
                       commands:
                         - tapOn:
                             text: 'Select All'
-            - eraseText: 100
+            - eraseText: 60
             - inputText: ${CLERK_TEST_EMAIL}
       # Wait for the typed value to land before tapping: the tap can race the
       # recomposition that enables the button, and this also catches a mangled
@@ -79,7 +79,6 @@ appId: com.clerk.exponativebuildfixture
     commands:
       - tapOn:
           text: 'Enter your password'
-      - eraseText: 50
       - inputText: ${CLERK_TEST_PASSWORD}
       # The password is masked so its value can't be asserted; settle for the
       # screen going stable so the tap doesn't race the enabling recomposition.
diff --git a/integration/tests/expo-native/run-android-flows.sh b/integration/tests/expo-native/run-android-flows.sh
index 29a8e165b84..d1751b0bd0b 100755
--- a/integration/tests/expo-native/run-android-flows.sh
+++ b/integration/tests/expo-native/run-android-flows.sh
@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
+# Usage: ./run-android-flows.sh <apk>   (inside reactivecircus/android-emulator-runner)
 set -euo pipefail
 cd "$(dirname "${BASH_SOURCE[0]}")"
 
@@ -8,21 +9,53 @@ command -v adb >/dev/null 2>&1 || {
   exit 1
 }
 
-adb install -r "$apk_path"
+shards=${MAESTRO_SHARDS:-1}
+devices=(emulator-5554)
+sdk=$(dirname "$(dirname "$(command -v adb)")")
+debug=${MAESTRO_DEBUG_OUTPUT:-${TMPDIR:-/tmp}/clerk-expo-maestro-runner}
+mkdir -p "$debug"
 
-logcat_pid=
+for ((i = 1; i < shards; i++)); do
+  port=$((5554 + i * 2))
+  "$sdk/emulator/emulator" -avd "${AVD_NAME:-test}" -read-only -port "$port" \
+    -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -no-snapshot-save \
+    > "$debug/emulator-$port.log" 2>&1 &
+  devices+=("emulator-$port")
+done
+
+# adb wait-for-device never returns for an emulator that died at startup
+wait_for_boot() {
+  local device=$1 elapsed=0
+  until [ "$(adb -s "$device" shell getprop sys.boot_completed 2>/dev/null | tr -d '\r')" = 1 ]; do
+    if [ "$elapsed" -ge 240 ]; then
+      echo "::error::$device did not boot within ${elapsed}s"
+      [ -f "$debug/$device.log" ] && tail -n 40 "$debug/$device.log"
+      return 1
+    fi
+    sleep 5
+    elapsed=$((elapsed + 5))
+  done
+  echo "$device booted"
+}
+for device in "${devices[@]}"; do
+  wait_for_boot "$device"
+  adb -s "$device" install -r "$apk_path"
+done
+
+logcat_pids=()
 stop_logcat() {
-  [ -n "$logcat_pid" ] || return 0
-  kill "$logcat_pid" >/dev/null 2>&1 || true
-  wait "$logcat_pid" 2>/dev/null || true
+  local pid
+  for pid in ${logcat_pids[@]+"${logcat_pids[@]}"}; do
+    kill "$pid" >/dev/null 2>&1 || true
+    wait "$pid" 2>/dev/null || true
+  done
 }
 trap stop_logcat EXIT
 
-if [ -n "${MAESTRO_DEBUG_OUTPUT:-}" ]; then
-  mkdir -p "$MAESTRO_DEBUG_OUTPUT"
-  adb logcat -c || true
-  adb logcat -v threadtime > "$MAESTRO_DEBUG_OUTPUT/android-logcat.log" 2>&1 &
-  logcat_pid=$!
-fi
+for device in "${devices[@]}"; do
+  adb -s "$device" logcat -c || true
+  adb -s "$device" logcat -v threadtime > "$debug/$device-logcat.log" 2>&1 &
+  logcat_pids+=($!)
+done
 
-./run-flows.sh adb shell am force-stop com.clerk.exponativebuildfixture
+PLATFORM=android MAESTRO_UDID=$(IFS=,; echo "${devices[*]}") ./run-flows.sh
diff --git a/integration/tests/expo-native/run-flows.sh b/integration/tests/expo-native/run-flows.sh
index b3eb7b7f64c..26b5fc8f4fa 100755
--- a/integration/tests/expo-native/run-flows.sh
+++ b/integration/tests/expo-native/run-flows.sh
@@ -1,17 +1,5 @@
 #!/usr/bin/env bash
-# Runs every top-level Maestro flow (flows/*.yaml; flows/subflows/ are
-# runFlow-only pieces) as one CLI invocation per flow, so a hang or crash in
-# one flow can't poison the rest, with one clean-state retry per flow.
-# Whole-flow retry can mask app instability (the Maestro docs discourage it),
-# so it is capped at a single retry purely to absorb emulator/simulator flake.
-#
-# Usage: ./run-flows.sh [force-stop command...]
-#   CI iOS:     ./run-flows.sh xcrun simctl terminate "$SIM_UDID" com.clerk.exponativebuildfixture
-#   CI Android: ./run-flows.sh adb shell am force-stop com.clerk.exponativebuildfixture
-#   Local:      ./run-flows.sh
-#
-# Required env: CLERK_TEST_EMAIL, CLERK_TEST_PASSWORD
-# Optional env: MAESTRO_DEBUG_OUTPUT (directory for CI debug artifacts)
+# Usage: PLATFORM=<ios|android> [MAESTRO_UDID=a,b] [MAESTRO_DEBUG_OUTPUT=dir] ./run-flows.sh
 set -euo pipefail
 cd "$(dirname "${BASH_SOURCE[0]}")"
 
@@ -23,92 +11,120 @@ command -v maestro >/dev/null 2>&1 || {
   exit 1
 }
 
+: "${PLATFORM:?PLATFORM (ios|android) is required}"
 : "${CLERK_TEST_EMAIL:?CLERK_TEST_EMAIL is required}"
 : "${CLERK_TEST_PASSWORD:?CLERK_TEST_PASSWORD is required}"
 
-force_stop() { if [ "$#" -gt 0 ]; then "$@" >/dev/null 2>&1 || true; fi; }
+app_id=com.clerk.exponativebuildfixture
+output_root=${MAESTRO_DEBUG_OUTPUT:-${TMPDIR:-/tmp}/clerk-expo-maestro-runner}
+IFS=, read -r -a devices <<< "${MAESTRO_UDID:-}"
+device_count=${#devices[@]}
+[ "$device_count" -gt 0 ] || device_count=1
 
-run_flow() {
-  local output_name=$1
-  shift
-  local output_root=${MAESTRO_DEBUG_OUTPUT:-${TMPDIR:-/tmp}/clerk-expo-maestro-runner}
+force_stop() {
+  local device
+  for device in "${devices[@]:-booted}"; do
+    if [ "$PLATFORM" = ios ]; then
+      xcrun simctl terminate "$device" "$app_id" >/dev/null 2>&1 || true
+    elif [ "$device" = booted ]; then
+      adb shell am force-stop "$app_id" >/dev/null 2>&1 || true
+    else
+      adb -s "$device" shell am force-stop "$app_id" >/dev/null 2>&1 || true
+    fi
+  done
+}
 
-  maestro test \
+run_maestro() {
+  local output_name=$1 mode=$2 shards=$3
+  shift 3
+  local shard_args=()
+  if [ "$shards" -gt 1 ]; then shard_args=("--shard-$mode" "$shards"); fi
+  maestro ${MAESTRO_UDID:+--udid "$MAESTRO_UDID"} test \
+    ${shard_args[@]+"${shard_args[@]}"} \
     --debug-output "$output_root/$output_name" \
     --flatten-debug-output \
+    --format JUNIT \
+    --output "$output_root/$output_name/report.xml" \
+    -e CLERK_TEST_EMAIL="$CLERK_TEST_EMAIL" \
+    -e CLERK_TEST_PASSWORD="$CLERK_TEST_PASSWORD" \
     "$@"
 }
 
-record_result() {
-  local flow=$1
-  local result=$2
-  local attempts=$3
-  local duration=$4
-
-  echo "Flow $flow: $result after $attempts attempt(s) in ${duration}s"
-  if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
-    printf '| `%s` | %s | %s | %ss |\n' "$flow" "$result" "$attempts" "$duration" >> "$GITHUB_STEP_SUMMARY"
-  fi
+report_rows() {
+  python3 - "$1" <<'PY'
+import sys, xml.etree.ElementTree as ET
+for case in ET.parse(sys.argv[1]).getroot().iter('testcase'):
+    print(f"{case.get('file')}\t{case.get('status')}\t{float(case.get('time') or 0):.0f}")
+PY
 }
 
-if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
-  {
-    echo '### Maestro flow timings'
-    echo '| Flow | Result | Attempts | Duration |'
-    echo '| --- | --- | ---: | ---: |'
-  } >> "$GITHUB_STEP_SUMMARY"
-fi
-
-# Warm up the JS bundle and accessibility tree before running the flows.
-warmup_started=$SECONDS
+started=$SECONDS
 warmup_result=failed
 for warmup_attempt in 1 2; do
-  if run_flow "warmup-attempt-$warmup_attempt" flows/subflows/_warmup.yaml; then
+  if run_maestro "warmup-attempt-$warmup_attempt" all "$device_count" flows/subflows/_warmup.yaml; then
     warmup_result=passed
     break
   fi
-  force_stop "$@"
+  force_stop
   if [ "$warmup_attempt" -eq 1 ]; then
     echo "::warning::Warmup failed attempt 1, retrying after 10s..."
     sleep 10
   fi
 done
-warmup_duration=$((SECONDS - warmup_started))
-record_result "_warmup" "$warmup_result" "$warmup_attempt" "$warmup_duration"
+echo "Warmup: $warmup_result after $warmup_attempt attempt(s) in $((SECONDS - started))s"
 if [ "$warmup_result" != passed ]; then
   echo "::error::Warmup failed after 2 attempts; aborting Maestro flows"
   exit 1
 fi
 
 # Force-stop so the first launchApp clearState doesn't race the warm process.
-force_stop "$@"
+force_stop
+
+run_maestro flows split "$device_count" flows/*.yaml || true
+report_rows "$output_root/flows/report.xml" > "$output_root/attempt-1.tsv"
+
+failed=()
+while IFS=$'\t' read -r file status _; do
+  [ "$status" = SUCCESS ] || failed+=("$file")
+done < "$output_root/attempt-1.tsv"
+
+if [ "${#failed[@]}" -gt 0 ]; then
+  echo "::warning::${#failed[@]} flow(s) failed, rerunning after 10s to tell flaky from deterministic: ${failed[*]}"
+  force_stop
+  sleep 10
+  shards=$device_count
+  [ "${#failed[@]}" -lt "$shards" ] && shards=${#failed[@]}
+  run_maestro rerun split "$shards" "${failed[@]}" || true
+  report_rows "$output_root/rerun/report.xml" > "$output_root/attempt-2.tsv"
+fi
+
+if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+  {
+    echo "### Maestro flow timings ($device_count device(s))"
+    echo '| Flow | Result | Attempts | Duration |'
+    echo '| --- | --- | ---: | ---: |'
+  } >> "$GITHUB_STEP_SUMMARY"
+fi
 
-# Every flows/*.yaml is a cross-platform test (platform differences live in
-# per-step `when: platform:` conditionals); flows/subflows/ are runFlow-only.
 status=0
-for flow in flows/*.yaml; do
-  [ -e "$flow" ] || continue
-  flow_started=$SECONDS
-  flow_result=failed
-  for attempt in 1 2; do
-    if run_flow "${flow##*/}-attempt-$attempt" \
-      -e CLERK_TEST_EMAIL="$CLERK_TEST_EMAIL" \
-      -e CLERK_TEST_PASSWORD="$CLERK_TEST_PASSWORD" \
-      "$flow"; then
-      flow_result=passed
-      break
+while IFS=$'\t' read -r file result seconds; do
+  attempts=1
+  if [ "$result" = SUCCESS ]; then
+    result=passed
+  else
+    status=1
+    result=failed
+    rerun=$(awk -F'\t' -v f="$file" '$1 == f { print $2 "\t" $3 }' "$output_root/attempt-2.tsv" 2>/dev/null || true)
+    if [ -n "$rerun" ]; then
+      attempts=2
+      IFS=$'\t' read -r rerun_result seconds <<< "$rerun"
+      [ "$rerun_result" = SUCCESS ] && result='flaky (failed, then passed on the rerun)'
     fi
-    if [ "$attempt" -eq 2 ]; then
-      echo "::error::Flow $flow failed after 2 attempts"
-      status=1
-      force_stop "$@"
-      break
-    fi
-    echo "::warning::Flow $flow failed attempt $attempt, retrying after 10s..."
-    force_stop "$@"
-    sleep 10
-  done
-  flow_duration=$((SECONDS - flow_started))
-  record_result "$flow" "$flow_result" "$attempt" "$flow_duration"
-done
+    echo "::error::Flow $file: $result"
+  fi
+  echo "Flow $file: $result after $attempts attempt(s) in ${seconds}s"
+  if [ -n "${GITHUB_STEP_SUMMARY:-}" ]; then
+    printf '| `%s` | %s | %s | %ss |\n' "$file" "$result" "$attempts" "$seconds" >> "$GITHUB_STEP_SUMMARY"
+  fi
+done < "$output_root/attempt-1.tsv"
 exit $status
diff --git a/package.json b/package.json
index 836fd3ad975..9859c14da76 100644
--- a/package.json
+++ b/package.json
@@ -46,7 +46,8 @@
     "test:integration:custom": "pnpm test:integration:base --grep @custom",
     "test:integration:deployment:nextjs": "pnpm playwright test --config integration/playwright.deployments.config.ts",
     "test:integration:electron": "pnpm test:integration:base --grep @electron",
-    "test:integration:expo-native": "integration/tests/expo-native/run-flows.sh",
+    "test:integration:expo-native:android": "PLATFORM=android integration/tests/expo-native/run-flows.sh",
+    "test:integration:expo-native:ios": "PLATFORM=ios integration/tests/expo-native/run-flows.sh",
     "test:integration:expo-web:disabled": "E2E_APP_ID=expo.expo-web pnpm test:integration:base --grep @expo-web",
     "test:integration:express": "E2E_APP_ID=express.* pnpm test:integration:base --grep @express",
     "test:integration:fastify": "E2E_APP_ID=fastify.* pnpm test:integration:base --grep @fastify",