diff --git a/.github/workflows/i18n-autotranslate.yml b/.github/workflows/i18n-autotranslate.yml
index 7014e81242..e62e64e9d2 100644
--- a/.github/workflows/i18n-autotranslate.yml
+++ b/.github/workflows/i18n-autotranslate.yml
@@ -34,6 +34,17 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 2  # need the previous en.json to detect CHANGED keys
+          # Nothing in this job pushes from this working copy. The only git
+          # operation that reaches the network is the `Open sync PR` step, and
+          # peter-evans/create-pull-request configures its own credential from
+          # its `token` input (default `${{ github.token }}`) -- it unsets any
+          # persisted http.<url>.extraheader first and restores it afterwards,
+          # so it never reads this one. The script below only runs
+          # `git show <ref>:<path>`, a local object read needing no credential.
+          # Left persisted, a `contents: write` token would instead sit
+          # readable in .git/config for the whole job, which installs a global
+          # npm package and runs the Claude Code CLI over repository content.
+          persist-credentials: false
 
       - name: Guard - require Claude Code token
         run: |
diff --git a/.github/workflows/i18n-docs-autotranslate.yml b/.github/workflows/i18n-docs-autotranslate.yml
index 6283c60a3b..1a158e2c0e 100644
--- a/.github/workflows/i18n-docs-autotranslate.yml
+++ b/.github/workflows/i18n-docs-autotranslate.yml
@@ -28,6 +28,15 @@ jobs:
       CLAUDE_CODE_OAUTH_TOKEN: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          # Same reasoning as i18n-autotranslate.yml: this working copy is
+          # never pushed from. The only networked git operation is the
+          # `Open sync PR` step, and peter-evans/create-pull-request supplies
+          # its own credential from its `token` input rather than reading a
+          # persisted one. scripts/i18n_translate_docs.py does not touch git
+          # at all. So this credential has no consumer, and would otherwise
+          # stay readable in .git/config across the Claude Code CLI run.
+          persist-credentials: false
 
       - name: Guard - require Claude Code token
         run: |
diff --git a/tests/data/moat_perf_baseline.json b/tests/data/moat_perf_baseline.json
index c05253a488..5b3cd04285 100644
--- a/tests/data/moat_perf_baseline.json
+++ b/tests/data/moat_perf_baseline.json
@@ -60,9 +60,9 @@
     "url": "/api/skills/fidelity"
   },
   "subagents": {
-    "captured_at": "2026-05-20",
-    "captured_sha": "e77c721",
-    "fast_path_ms_p50": 2.38,
+    "captured_at": "2026-09-02",
+    "captured_sha": "ed86308",
+    "fast_path_ms_p50": 4.97,
     "url": "/api/subagents"
   },
   "task_runs": {