diff --git a/tools/test-install.sh b/tools/test-install.sh
index 37db568..8e6d81e 100755
--- a/tools/test-install.sh
+++ b/tools/test-install.sh
@@ -20,6 +20,15 @@
 #                        tmpfs (default ~/.cache/nomarchy-vm)
 #   NOMARCHY_BOOT_WAIT   seconds to wait for the live desktop (default 480)
 #   NOMARCHY_INSTALL_TIMEOUT  seconds before declaring a hang (default 2700)
+#
+# Unattended matrix (BACKLOG #74) — env flags only, no interactive options:
+#   NOMARCHY_TEST_SWAP_GB=2          # default; 0 = no swap subvol
+#   NOMARCHY_TEST_NO_LUKS=0          # default LUKS+passphrase; 1 = cleartext
+# Matrix to run when checking swap/LUKS contracts:
+#   (default)     SWAP=2  NO_LUKS=0
+#   no-swap       SWAP=0  NO_LUKS=0
+#   no-LUKS       SWAP=2  NO_LUKS=1
+#   no-swap+no-LUKS  SWAP=0 NO_LUKS=1
 
 set -euo pipefail
 cd "$(dirname "$0")/.."
@@ -28,6 +37,12 @@ VM_DIR="${NOMARCHY_VM_DIR:-/tmp/nomarchy-vm}"
 TARGET_DIR="${NOMARCHY_TARGET_DIR:-$HOME/.cache/nomarchy-vm}"
 BOOT_WAIT="${NOMARCHY_BOOT_WAIT:-480}"
 INSTALL_TIMEOUT="${NOMARCHY_INSTALL_TIMEOUT:-2700}"
+TEST_SWAP_GB="${NOMARCHY_TEST_SWAP_GB:-2}"
+TEST_NO_LUKS="${NOMARCHY_TEST_NO_LUKS:-0}"
+[[ "$TEST_SWAP_GB" =~ ^[0-9]+$ ]] || { echo "NOMARCHY_TEST_SWAP_GB must be a whole number" >&2; exit 1; }
+[[ "$TEST_NO_LUKS" == "0" || "$TEST_NO_LUKS" == "1" ]] || {
+    echo "NOMARCHY_TEST_NO_LUKS must be 0 or 1" >&2; exit 1
+}
 export NOMARCHY_QMP_SOCK="$VM_DIR/qmp.sock"
 QMP=tools/vm/qmp.py
 SHOT=tools/vm/vncshot.py