From ef5e74fe776749357d242b0ff30b921da8326b28 Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Thu, 2 Jul 2026 00:37:26 +0800
Subject: [PATCH] fix(cd): keep host load classifiers on controlled profile
 [metadata-only]

---
 .gitea/workflows/cd.yaml                         |  9 +++++++++
 ops/runner/test_cd_controlled_runtime_profile.py | 11 +++++++++++
 2 files changed, 20 insertions(+)

diff --git a/.gitea/workflows/cd.yaml b/.gitea/workflows/cd.yaml
index 13b1dbb3f..ceda902ba 100644
--- a/.gitea/workflows/cd.yaml
+++ b/.gitea/workflows/cd.yaml
@@ -564,10 +564,16 @@ jobs:
                 ;;
               scripts/ops/docker-disk-pressure-retention-cleanup.py)
                 ;;
+              scripts/ops/host-runaway-process-exporter.py)
+                ;;
+              scripts/ops/host-sustained-load-evidence.py)
+                ;;
               scripts/ops/tests/test_backup_health_textfile_exporter.py)
                 ;;
               scripts/ops/tests/test_docker_disk_pressure_retention_cleanup.py)
                 ;;
+              scripts/ops/tests/test_host_runaway_process_exporter.py)
+                ;;
               scripts/ops/tests/test_host_pressure_alert_contract.py)
                 ;;
               scripts/reboot-recovery/deploy-to-110.sh)
@@ -802,6 +808,8 @@ jobs:
               ../../scripts/ops/backup-alert-label-contract-check.py \
               ../../scripts/ops/backup-health-textfile-exporter.py \
               ../../scripts/ops/docker-disk-pressure-retention-cleanup.py \
+              ../../scripts/ops/host-runaway-process-exporter.py \
+              ../../scripts/ops/host-sustained-load-evidence.py \
               ../../scripts/security/gitea-private-inventory-p0-scorecard.py \
               ../../scripts/security/gitea-authenticated-inventory-payload-validator.py
             python3.11 -c "import yaml; yaml.safe_load(open('../../ops/monitoring/alerts-unified.yml')); print('alerts-unified YAML OK')"
@@ -883,6 +891,7 @@ jobs:
               ../../scripts/backup/tests/test_backup_status_contract.py \
               ../../scripts/ops/tests/test_backup_health_textfile_exporter.py \
               ../../scripts/ops/tests/test_docker_disk_pressure_retention_cleanup.py \
+              ../../scripts/ops/tests/test_host_runaway_process_exporter.py \
               ../../scripts/ops/tests/test_host_pressure_alert_contract.py \
               ../../scripts/reboot-recovery/tests/test_dr_escrow_evidence_checklist.py \
               ../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py \
diff --git a/ops/runner/test_cd_controlled_runtime_profile.py b/ops/runner/test_cd_controlled_runtime_profile.py
index 193587fb3..b2439f27f 100644
--- a/ops/runner/test_cd_controlled_runtime_profile.py
+++ b/ops/runner/test_cd_controlled_runtime_profile.py
@@ -110,12 +110,18 @@ def test_backup_freshness_sources_stay_on_controlled_runtime_profile() -> None:
         "scripts/ops/backup-alert-label-contract-check.py)",
         "scripts/ops/backup-health-textfile-exporter.py)",
         "scripts/ops/tests/test_backup_health_textfile_exporter.py)",
+        "scripts/ops/host-runaway-process-exporter.py)",
+        "scripts/ops/host-sustained-load-evidence.py)",
+        "scripts/ops/tests/test_host_runaway_process_exporter.py)",
         "scripts/ops/tests/test_host_pressure_alert_contract.py)",
         "../../scripts/backup/backup-awoooi-frequent.sh",
         "../../scripts/backup/backup-status.sh",
         "../../scripts/backup/tests/test_backup_status_contract.py",
         "../../scripts/ops/backup-alert-label-contract-check.py",
+        "../../scripts/ops/host-runaway-process-exporter.py",
+        "../../scripts/ops/host-sustained-load-evidence.py",
         "../../scripts/ops/tests/test_backup_health_textfile_exporter.py",
+        "../../scripts/ops/tests/test_host_runaway_process_exporter.py",
         "../../scripts/ops/tests/test_host_pressure_alert_contract.py",
     ]
     for source in expected_sources:
@@ -715,6 +721,8 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/backup/gitea-repo-bundle-backup.sh)",
         "scripts/ops/backup-health-textfile-exporter.py)",
         "scripts/ops/docker-disk-pressure-retention-cleanup.py)",
+        "scripts/ops/host-runaway-process-exporter.py)",
+        "scripts/ops/host-sustained-load-evidence.py)",
         "scripts/reboot-recovery/deploy-to-110.sh)",
         "scripts/reboot-recovery/recover-110-control-path-and-harbor-local.sh)",
         "scripts/reboot-recovery/apply-credential-escrow-closeout-receipt-to-110.sh)",
@@ -740,6 +748,8 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "scripts/reboot-recovery/tests/test_momo_source_arrival_gate.py)",
         "../../scripts/ops/backup-health-textfile-exporter.py",
         "../../scripts/ops/docker-disk-pressure-retention-cleanup.py",
+        "../../scripts/ops/host-runaway-process-exporter.py",
+        "../../scripts/ops/host-sustained-load-evidence.py",
         "../../scripts/backup/gitea-repo-bundle-backup.sh",
         "../../ops/monitoring/alerts-unified.yml",
         "../../ops/monitoring/alerts.yml",
@@ -764,6 +774,7 @@ def test_post_start_recovery_verifiers_stay_on_controlled_runtime_profile() -> N
         "../../scripts/reboot-recovery/verify-cold-start-monitor-deploy.sh",
         "../../scripts/reboot-recovery/tests/test_188_host_hygiene_checklist.py",
         "../../scripts/ops/tests/test_docker_disk_pressure_retention_cleanup.py",
+        "../../scripts/ops/tests/test_host_runaway_process_exporter.py",
         "../../scripts/reboot-recovery/tests/test_post_start_quick_check_contract.py",
         "../../scripts/reboot-recovery/tests/test_cold_start_monitor_bounded_probes.py",
         "../../scripts/reboot-recovery/tests/test_reboot_p0_operational_contract.py",