diff --git a/scripts/verify.sh b/scripts/verify.sh
index 365694e..d0bb8a4 100755
--- a/scripts/verify.sh
+++ b/scripts/verify.sh
@@ -3,6 +3,8 @@
 # (the Eureka verify image has both); a Windows workstation proves nothing.
 # The Windows check runs first: it is fast, and a hung test cannot mask it.
 # --lib because the tests under tests/ assume the host layout.
+# The Windows --lib --tests check keeps unix-only test code from leaking out of its cfg.
 set -euo pipefail
 cargo check --locked --target x86_64-pc-windows-gnu --bin idunn-host
+cargo check --locked --target x86_64-pc-windows-gnu --lib --tests
 cargo test --locked --lib