test(site): bound isolated Node probes by caller cancellation only

Website runs 40488439737 and 40492531026 failed 52 tests at about
4m59s: SiteIsolatedFixture's projection probe re-derives every measured
value from the original session archives and was killed by the fixed
300-second IsolatedProcessDeadline. Both runs used the same benchmark
producer (9c30d28, run 40457815454) as the passing run 40482513353;
that cohort adds a full three-node OpenSearch session, so the real work
now sits at the invented limit and passes or fails by runner speed.

Remove IsolatedProcessDeadline per the owner's rule against fixed test
deadlines: isolated Node probes and GitHub probes now run until they
exit or the test session cancels them. GitHub capture transfers keep
their existing bound. No test or assertion changes.

Verified locally: KeyLoad.WebsiteTests build -warnaserror and format
verify. Qualification is the next Website run.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: KSemenenko

site/Features/BenchmarkComparisons/protocol.md

@@ -44,7 +44,7 @@ CPU, allocation and peak RSS are process observations over the lane interval; ov
 
 ## TUnit, builder and coverage
 
-All tests are TUnit. `SessionCohortContractTests` and `SiteSessionContractCoverageTests` execute the single controlled `session-contract-probe.mjs`, which imports the actual production modules. Nine scenarios cover plan, reports, selection, environment, qualification, runtime, site-context, publication and profile-accounting. They verify positive inputs and specific identity/accounting/admission mutations; their values never enter published artifacts. Node children have bounded concurrent stdout/stderr, a deadline and joined ownership; Website children inherit the real `NODE_V8_COVERAGE`.
+All tests are TUnit. `SessionCohortContractTests` and `SiteSessionContractCoverageTests` execute the single controlled `session-contract-probe.mjs`, which imports the actual production modules. Nine scenarios cover plan, reports, selection, environment, qualification, runtime, site-context, publication and profile-accounting. They verify positive inputs and specific identity/accounting/admission mutations; their values never enter published artifacts. Node children have bounded concurrent stdout/stderr, caller cancellation instead of a fixed deadline, and joined ownership; Website children inherit the real `NODE_V8_COVERAGE`.
 
 An independent C# oracle computes the expected per-case/lane values from authenticated originals. Real Chrome/CDP sessions load builder-emitted assets through a confined ephemeral HTTP listener and verify controls, keyboard/accessibility, raw hash rejection, cancellation and stale generations. Scene regressions and coverage converter regressions are retained.
 

tests/KeyLoad.WebsiteTests/Configuration/SiteExecutionConfiguration.cs

@@ -14,8 +14,7 @@ private static IOptions<SiteExecutionOptions> Bind()
             policy.BrowserStartupTimeout, policy.NavigationPollDelay, policy.NoScriptPoll,
             policy.SceneIdleWait, policy.SceneSettleWait, policy.ChildDeadline, policy.ChildPoll,
             policy.ChildQueueDeadline, policy.CleanupTimeout, policy.NodeTimeout,
-            policy.StaticHostTimeout, policy.AdmissionDeadline, policy.GitHubDeadline,
-            policy.IsolatedProcessDeadline];
+            policy.StaticHostTimeout, policy.AdmissionDeadline, policy.GitHubDeadline];
         foreach (var duration in durations)
         {
             ArgumentOutOfRangeException.ThrowIfLessThanOrEqual(duration, TimeSpan.Zero);

tests/KeyLoad.WebsiteTests/Configuration/SiteExecutionOptions.cs

@@ -18,7 +18,6 @@ internal sealed class SiteExecutionOptions
     public TimeSpan StaticHostTimeout { get; set; } = TimeSpan.FromSeconds(5);
     public TimeSpan AdmissionDeadline { get; set; } = TimeSpan.FromMinutes(20);
     public TimeSpan GitHubDeadline { get; set; } = TimeSpan.FromMinutes(120);
-    public TimeSpan IsolatedProcessDeadline { get; set; } = TimeSpan.FromSeconds(300);
     public int BrowserSessionCapacity { get; set; } = 1;
     public int MaximumQueued { get; set; } = 64;
     public int HeavyChildCapacity { get; set; } = 2;

tests/KeyLoad.WebsiteTests/Processes/SiteIsolated/SiteIsolatedGitHubProcess.cs

@@ -9,9 +9,9 @@ public static Task<SiteProcessResult> RunAsync(ProcessStartInfo start, Cancellat
 
     public static Task<SiteProcessResult> RunProbeAsync(ProcessStartInfo start, CancellationToken token,
         SiteHeavyChildAdmission? admission = null) =>
-        RunAsync(start, SiteExecutionConfiguration.Options.Value.IsolatedProcessDeadline, admission, token);
+        RunAsync(start, bound: null, admission, token);
 
-    private static async Task<SiteProcessResult> RunAsync(ProcessStartInfo start, TimeSpan bound,
+    private static async Task<SiteProcessResult> RunAsync(ProcessStartInfo start, TimeSpan? bound,
         SiteHeavyChildAdmission? admission, CancellationToken token)
     {
         using var lease = admission is null ? null : await admission.AcquireAsync(token);
@@ -23,8 +23,9 @@ private static async Task<SiteProcessResult> RunAsync(ProcessStartInfo start, Ti
         }
         lease?.MarkStarted(process);
 
-        using var deadlineTimeout = new CancellationTokenSource(bound, TimeProvider.System);
-        using var deadline = CancellationTokenSource.CreateLinkedTokenSource(token, deadlineTimeout.Token);
+        // Probes run until they exit or the caller cancels; only remote GitHub captures keep their transport bound.
+        using var deadlineTimeout = bound is null ? null : new CancellationTokenSource(bound.Value, TimeProvider.System);
+        using var deadline = CancellationTokenSource.CreateLinkedTokenSource(token, deadlineTimeout?.Token ?? CancellationToken.None);
         var stdout = SiteIsolatedGitHubProcessOutput.ReadAsync(process.StandardOutput,
             SiteIsolatedGitHubProcessOutput.MaximumOutputCharacters, deadline.Token);
         var stderr = SiteIsolatedGitHubProcessOutput.ReadAsync(process.StandardError,

tests/KeyLoad.WebsiteTests/Processes/SiteIsolated/SiteIsolatedNodeProcess.cs

@@ -43,13 +43,12 @@ public static async Task<SiteProcessResult> RunProcessAsync(ProcessStartInfo sta
         }
         lease?.MarkStarted(process);
 
-        using var deadlineTimeout = new CancellationTokenSource(SiteExecutionConfiguration.Options.Value.IsolatedProcessDeadline, TimeProvider.System);
-        using var deadline = CancellationTokenSource.CreateLinkedTokenSource(cancellationToken, deadlineTimeout.Token);
-        var stdout = SiteProcessOutput.ReadAsync(process.StandardOutput, ProbeFailure, deadline.Token);
-        var stderr = SiteProcessOutput.ReadAsync(process.StandardError, ProbeFailure, deadline.Token);
+        // Real projection work is bounded by the caller's cancellation, not by an invented fixed deadline.
+        var stdout = SiteProcessOutput.ReadAsync(process.StandardOutput, ProbeFailure, cancellationToken);
+        var stderr = SiteProcessOutput.ReadAsync(process.StandardError, ProbeFailure, cancellationToken);
         try
         {
-            var exit = process.WaitForExitAsync(deadline.Token);
+            var exit = process.WaitForExitAsync(cancellationToken);
             var first = await Task.WhenAny(exit, stdout, stderr).ConfigureAwait(false);
             await first.ConfigureAwait(false);
             await exit.ConfigureAwait(false);