diff --git a/.github/workflows/test-performance-agent.yml b/.github/workflows/test-performance-agent.yml
index efe04ab29c3..fb99d2d6280 100644
--- a/.github/workflows/test-performance-agent.yml
+++ b/.github/workflows/test-performance-agent.yml
@@ -31,7 +31,7 @@ jobs:
           github.event.workflow_run.event == 'push' &&
           github.event.workflow_run.head_branch == 'main' &&
           !endsWith(github.event.workflow_run.actor.login, '[bot]')))
-    runs-on: blacksmith-32vcpu-ubuntu-2404
+    runs-on: ubuntu-24.04
     timeout-minutes: 240
     steps:
       - name: Checkout
diff --git a/docs/ci.md b/docs/ci.md
index 49b2ea50e3d..f9abc7acff4 100644
--- a/docs/ci.md
+++ b/docs/ci.md
@@ -34,6 +34,8 @@ make only small coverage-preserving test performance fixes, then reruns the
 full-suite report and rejects changes that reduce the passing baseline test
 count. If the baseline has failing tests, Codex may fix only obvious failures
 and the after-agent full-suite report must pass before anything is committed.
+It uses GitHub-hosted Ubuntu so the Codex action can keep the same drop-sudo
+safety posture as the docs agent.
 
 ```bash
 gh workflow run duplicate-after-merge.yml \