Require explicit self-hosted soak provenance

Author: durable-workflow-ops

docs/bounded-growth.md

@@ -115,8 +115,8 @@ alerting.
 `trusted_long_soak_v1` profile. Short CI smokes can still pass, but they are
 classified as ineligible for the issue-closing trusted evidence unless they run
 for at least one hour, use compose-backed resource sampling, run on a
-self-hosted runner when GitHub exposes the runner environment, meet sample
-coverage, and have no bounded-growth assertion failures.
+self-hosted runner with an explicit `RUNNER_ENVIRONMENT=self-hosted` provenance
+value, meet sample coverage, and have no bounded-growth assertion failures.
 
 Per-policy limits can be enforced with JSON maps keyed by policy ID:
 `DW_PERF_MAX_SERVER_CACHE_KEYS_BY_POLICY` for maximum observed keys and

scripts/perf/server_soak.py

@@ -678,7 +678,9 @@ def evidence_trust_profile(
         reasons.append(f"duration below trusted long-soak minimum {minimum_duration_seconds}s")
     if not compose_project:
         reasons.append("compose-backed resource sampling was not configured")
-    if runner_environment and runner_environment != "self-hosted":
+    if not runner_environment:
+        reasons.append("runner environment is unknown")
+    elif runner_environment != "self-hosted":
         reasons.append(f"runner environment is {runner_environment}, not self-hosted")
     if periodic_sample_count < minimum_trusted_samples:
         reasons.append("periodic sample coverage below trusted minimum")

tests/Unit/ServerPerfHarnessContractTest.php

@@ -50,6 +50,7 @@ public function test_soak_summary_records_trusted_evidence_fields(): void
             'minimum_duration_seconds',
             'requires_self_hosted_runner',
             'requires_compose_resource_sampling',
+            'runner environment is unknown',
             'duration below trusted long-soak minimum',
             'bounded-growth assertions failed',
         ] as $needle) {