Record perf runner provenance for bounded-growth evidence

Record perf runner provenance

Author: durable-workflow-ops

.github/workflows/server-perf.yml

@@ -111,6 +111,7 @@ jobs:
           DW_PERF_MAX_FINAL_POLLING_KEYS: "0"
           DW_PERF_MAX_SERVER_CACHE_KEYS_BY_POLICY: '{"workflow_task_poll_requests":512,"long_poll_signals":512,"workflow_query_tasks":64,"task_queue_admission_locks":128,"task_queue_dispatch_counters":128,"workflow_task_expired_lease_recovery":128,"history_retention_inline":64,"readiness_probe":16}'
           DW_PERF_MAX_FINAL_SERVER_CACHE_KEYS_BY_POLICY: '{"workflow_task_poll_requests":0,"long_poll_signals":0,"workflow_query_tasks":0,"task_queue_admission_locks":0,"task_queue_dispatch_counters":0,"workflow_task_expired_lease_recovery":0,"history_retention_inline":0,"readiness_probe":0}'
+          RUNNER_ENVIRONMENT: "github-hosted"
         run: scripts/perf/run-server-soak.sh
 
       - name: Upload perf artifacts
@@ -147,6 +148,7 @@ jobs:
           DW_PERF_REMOTE_WRITE_URL: ${{ vars.DW_PERF_REMOTE_WRITE_URL }}
           DW_PERF_REMOTE_WRITE_USERNAME: ${{ vars.DW_PERF_REMOTE_WRITE_USERNAME }}
           DW_PERF_REMOTE_WRITE_PASSWORD: ${{ secrets.DW_PERF_REMOTE_WRITE_PASSWORD }}
+          RUNNER_ENVIRONMENT: "self-hosted"
         run: scripts/perf/run-server-soak.sh
 
       - name: Upload perf artifacts

docs/bounded-growth.md

@@ -117,6 +117,8 @@ classified as ineligible for the issue-closing trusted evidence unless they run
 for at least one hour, use compose-backed resource sampling, run on a
 self-hosted runner with an explicit `RUNNER_ENVIRONMENT=self-hosted` provenance
 value, meet sample coverage, and have no bounded-growth assertion failures.
+The CI smoke workflow sets `RUNNER_ENVIRONMENT=github-hosted` so those artifacts
+are traceable without being eligible for the trusted long-soak profile.
 
 Per-policy limits can be enforced with JSON maps keyed by policy ID:
 `DW_PERF_MAX_SERVER_CACHE_KEYS_BY_POLICY` for maximum observed keys and

docs/perf-runner.md

@@ -60,6 +60,11 @@ cache-key drain path. The long soak runs on the labeled self-hosted runner and
 enforces the memory slope budget after the run is long enough to make that
 signal meaningful.
 
+Both workflow modes pass explicit runner provenance into the artifact. Short
+smokes set `RUNNER_ENVIRONMENT=github-hosted`; long soaks set
+`RUNNER_ENVIRONMENT=self-hosted`, which is required before `summary.json` can be
+classified as trusted long-soak evidence.
+
 ## Local Run
 
 From the server repo:

tests/Unit/ServerPerfHarnessContractTest.php

@@ -116,6 +116,24 @@ public function test_ci_perf_jobs_enforce_per_policy_cache_thresholds(): void
         }
     }
 
+    public function test_ci_perf_jobs_set_runner_environment_provenance(): void
+    {
+        $workflow = file_get_contents(dirname(__DIR__, 2).'/.github/workflows/server-perf.yml');
+        $this->assertNotFalse($workflow, '.github/workflows/server-perf.yml must be readable');
+
+        $this->assertMatchesRegularExpression(
+            '/name:\s+Polling cache bounded-growth smoke.*?RUNNER_ENVIRONMENT:\s+"github-hosted"/s',
+            $workflow,
+            'Short perf smokes must record github-hosted runner provenance.',
+        );
+
+        $this->assertMatchesRegularExpression(
+            '/name:\s+Self-hosted polling cache soak.*?RUNNER_ENVIRONMENT:\s+"self-hosted"/s',
+            $workflow,
+            'Trusted long soaks must explicitly record self-hosted runner provenance.',
+        );
+    }
+
     /**
      * @return array<string, string>
      */