Match Pages refresh trigger to performance workflow name

Author: KSemenenko

.github/workflows/pages.yml

@@ -13,7 +13,7 @@ on:
       - experiments/Synapse.ReferenceBenchmarks/Program.cs
   workflow_dispatch:
   workflow_run:
-    workflows: [verify, performance]
+    workflows: [verify, performance-diagnostic]
     types: [completed]
 
 permissions:

docs/Development/WebsiteMetricsEvidence-2026-10-03.md

@@ -82,3 +82,17 @@ because the dependency-repair authorization does not cover this feature. No
 commit or push occurred during that attempt. On 2026-10-03 the user explicitly
 authorized pushing these prepared changes to `main`; publication proceeds
 under that authorization.
+
+## Workflow name regression after publication
+
+Commit `00567dbba63f217ba8387829bb67131c877b5731` reached `origin/main` and
+created Pages run `37128235031`, verification run `37128235060`, and performance
+run `37128235064`. Run discovery exposed the actual performance workflow name
+`performance-diagnostic`, while the Pages subscription used `performance`.
+The improved source contract derives each upstream name from its real workflow
+file. It failed first (1/1, exit 2) before correcting the subscription.
+These run IDs establish dispatch, not completed test or deployment evidence.
+After the correction, Release test-project build passed with zero warnings
+or errors, the 19-case Website suite passed (exit 0, 13.971s), scoped format
+verification passed, and actionlint/diff checks passed. Sandbox IPC-denied
+attempts were rerun with required permissions and are not counted as passes.

tests/Synapse.IntegrationTests/Features/Website/MetricsPipelineTests.cs

@@ -25,19 +25,21 @@ public async Task MetricsWorkflowsConnectTrustedRunsAndImmutableJson()
     {
         var root = FindRepositoryRoot();
         var pages = await File.ReadAllTextAsync(Path.Combine(root, ".github/workflows/pages.yml"));
+        var verify = await File.ReadAllTextAsync(Path.Combine(root, ".github/workflows/verify.yml"));
+        var performance = await File.ReadAllTextAsync(Path.Combine(root, ".github/workflows/performance.yml"));
+        var verifyName = verify.Split('\n').First(line => line.StartsWith("name:", StringComparison.Ordinal))[5..].Trim();
+        var performanceName = performance.Split('\n').First(line => line.StartsWith("name:", StringComparison.Ordinal))[5..].Trim();
         await Assert.That(pages).Contains("workflow_run:");
-        await Assert.That(pages).Contains("workflows: [verify, performance]");
+        await Assert.That(pages).Contains($"workflows: [{verifyName}, {performanceName}]");
         await Assert.That(pages).Contains("github.event.workflow_run.head_branch == 'main'");
         await Assert.That(pages).Contains("github.event.workflow_run.event == 'push'");
         await Assert.That(pages).Contains("actions: read");
         await Assert.That(pages).Contains("collect-site-results.sh");
         await Assert.That(pages).Contains("site-data");
-        var verify = await File.ReadAllTextAsync(Path.Combine(root, ".github/workflows/verify.yml"));
         await Assert.That(verify).Contains("--report-trx");
         await Assert.That(verify).Contains("--minimum-expected-tests 1");
         await Assert.That(verify).Contains("test-report");
         await Assert.That(verify).Contains("test-results-${{ matrix.runtime_identifier }}");
-        var performance = await File.ReadAllTextAsync(Path.Combine(root, ".github/workflows/performance.yml"));
         await Assert.That(performance).Contains("--json \"${RUNNER_TEMP}/performance-results.json\"");
         var collector = await File.ReadAllTextAsync(Path.Combine(root, ".github/scripts/collect-site-results.sh"));
         await Assert.That(collector).Contains("run_attempt");