diff --git a/.github/workflows/agent-deep-dive.lock.yml b/.github/workflows/agent-deep-dive.lock.yml
index 2e275aa0..9cb52514 100644
--- a/.github/workflows/agent-deep-dive.lock.yml
+++ b/.github/workflows/agent-deep-dive.lock.yml
@@ -35,9 +35,9 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"486d2646969e238e840acbca0d3d95fd24b523eff497c32236edb0db10b24393"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"cbf06275f586ad92c59410329f258dce96a232caa6c22ce93a46bca8ba7a51e4"}
 
-name: "Agent Deep Dive"
+name: "Internal: Agent Deep Dive"
 "on":
   # bots: # Bots processed as bot check in pre-activation job
   # - github-actions[bot] # Bots processed as bot check in pre-activation job
@@ -65,7 +65,7 @@ concurrency:
   cancel-in-progress: true
   group: agent-deep-dive
 
-run-name: "Agent Deep Dive"
+run-name: "Internal: Agent Deep Dive"
 
 jobs:
   activation:
@@ -645,7 +645,7 @@ jobs:
               model: "gpt-5.3-codex",
               version: "",
               agent_version: "0.0.412",
-              workflow_name: "Agent Deep Dive",
+              workflow_name: "Internal: Agent Deep Dive",
               experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
@@ -1229,7 +1229,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Agent Deep Dive"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Deep Dive"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1242,7 +1242,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Deep Dive"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Deep Dive"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1255,7 +1255,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Deep Dive"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Deep Dive"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_WORKFLOW_ID: "agent-deep-dive"
@@ -1274,7 +1274,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Deep Dive"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Deep Dive"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_NOOP_MESSAGE: ${{ steps.noop.outputs.noop_message }}
@@ -1322,7 +1322,7 @@ jobs:
       - name: Setup threat detection
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
-          WORKFLOW_NAME: "Agent Deep Dive"
+          WORKFLOW_NAME: "Internal: Agent Deep Dive"
           WORKFLOW_DESCRIPTION: "Deep dive a specific agent workflow's recent runs to understand behavior and surface detailed recommendations"
           HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
         with:
@@ -1402,7 +1402,7 @@ jobs:
       GH_AW_ENGINE_ID: "copilot"
       GH_AW_ENGINE_MODEL: "gpt-5.3-codex"
       GH_AW_WORKFLOW_ID: "agent-deep-dive"
-      GH_AW_WORKFLOW_NAME: "Agent Deep Dive"
+      GH_AW_WORKFLOW_NAME: "Internal: Agent Deep Dive"
     outputs:
       create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}
       create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}
diff --git a/.github/workflows/agent-deep-dive.md b/.github/workflows/agent-deep-dive.md
index 26b49004..9c869ed4 100644
--- a/.github/workflows/agent-deep-dive.md
+++ b/.github/workflows/agent-deep-dive.md
@@ -1,6 +1,6 @@
 ---
 inlined-imports: true
-name: "Agent Deep Dive"
+name: "Internal: Agent Deep Dive"
 description: "Deep dive a specific agent workflow's recent runs to understand behavior and surface detailed recommendations"
 imports:
   - gh-aw-fragments/elastic-tools.md
diff --git a/.github/workflows/agent-efficiency.lock.yml b/.github/workflows/agent-efficiency.lock.yml
index 5a5adeed..80317eea 100644
--- a/.github/workflows/agent-efficiency.lock.yml
+++ b/.github/workflows/agent-efficiency.lock.yml
@@ -35,9 +35,9 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"6eb0305cce54e0ba0b25ec78e8b8da062c220e4905843d3db545df8303bcda5e"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"9877edd1f0ca6c7e3cc954e0ccdd320ff91bfb29360f89e3a606dfea23951e4d"}
 
-name: "Agent Efficiency"
+name: "Internal: Agent Efficiency"
 "on":
   # bots: # Bots processed as bot check in pre-activation job
   # - github-actions[bot] # Bots processed as bot check in pre-activation job
@@ -56,7 +56,7 @@ concurrency:
   cancel-in-progress: true
   group: agent-efficiency
 
-run-name: "Agent Efficiency"
+run-name: "Internal: Agent Efficiency"
 
 jobs:
   activation:
@@ -614,7 +614,7 @@ jobs:
               model: "gpt-5.3-codex",
               version: "",
               agent_version: "0.0.412",
-              workflow_name: "Agent Efficiency",
+              workflow_name: "Internal: Agent Efficiency",
               experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
@@ -1198,7 +1198,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Agent Efficiency"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Efficiency"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1211,7 +1211,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Efficiency"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Efficiency"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1224,7 +1224,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Efficiency"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Efficiency"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_WORKFLOW_ID: "agent-efficiency"
@@ -1243,7 +1243,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Agent Efficiency"
+          GH_AW_WORKFLOW_NAME: "Internal: Agent Efficiency"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_NOOP_MESSAGE: ${{ steps.noop.outputs.noop_message }}
@@ -1291,7 +1291,7 @@ jobs:
       - name: Setup threat detection
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
-          WORKFLOW_NAME: "Agent Efficiency"
+          WORKFLOW_NAME: "Internal: Agent Efficiency"
           WORKFLOW_DESCRIPTION: "Analyze agent workflow logs for inefficiencies, errors, and prompt improvement opportunities"
           HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
         with:
@@ -1371,7 +1371,7 @@ jobs:
       GH_AW_ENGINE_ID: "copilot"
       GH_AW_ENGINE_MODEL: "gpt-5.3-codex"
       GH_AW_WORKFLOW_ID: "agent-efficiency"
-      GH_AW_WORKFLOW_NAME: "Agent Efficiency"
+      GH_AW_WORKFLOW_NAME: "Internal: Agent Efficiency"
     outputs:
       create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}
       create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}
diff --git a/.github/workflows/agent-efficiency.md b/.github/workflows/agent-efficiency.md
index 22fb87cb..27a0d408 100644
--- a/.github/workflows/agent-efficiency.md
+++ b/.github/workflows/agent-efficiency.md
@@ -1,6 +1,6 @@
 ---
 inlined-imports: true
-name: "Agent Efficiency"
+name: "Internal: Agent Efficiency"
 description: "Analyze agent workflow logs for inefficiencies, errors, and prompt improvement opportunities"
 imports:
   - gh-aw-fragments/elastic-tools.md
diff --git a/.github/workflows/agentics-maintenance.yml b/.github/workflows/agentics-maintenance.yml
index 928d335d..89d2058c 100644
--- a/.github/workflows/agentics-maintenance.yml
+++ b/.github/workflows/agentics-maintenance.yml
@@ -31,7 +31,7 @@
 # in create-discussions, create-issues, or create-pull-request safe-outputs configuration.
 # Schedule frequency is automatically determined by the shortest expiration time.
 #
-name: Agentic Maintenance
+name: "Internal: Agentic Maintenance"
 
 on:
   schedule:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 33a11505..0a252c33 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,5 @@
 ---
-name: CI
+name: "Internal: CI"
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/claude-mention-in-issue.yml b/.github/workflows/claude-mention-in-issue.yml
index e3a6b93b..1aaff892 100644
--- a/.github/workflows/claude-mention-in-issue.yml
+++ b/.github/workflows/claude-mention-in-issue.yml
@@ -1,5 +1,5 @@
 # Dogfood: @claude mentions on issues using local composite action
-name: Claude Mention (Issue)
+name: "Internal: Claude Mention (Issue)"
 
 on:
   issue_comment:
diff --git a/.github/workflows/claude-mention-in-pr.yml b/.github/workflows/claude-mention-in-pr.yml
index 6f0ccec1..ea30146e 100644
--- a/.github/workflows/claude-mention-in-pr.yml
+++ b/.github/workflows/claude-mention-in-pr.yml
@@ -1,5 +1,5 @@
 # Dogfood: @claude mentions on PRs using local composite action
-name: Claude Mention (PR)
+name: "Internal: Claude Mention (PR)"
 
 on:
   issue_comment:
diff --git a/.github/workflows/downstream-users.lock.yml b/.github/workflows/downstream-users.lock.yml
index 21e84db2..070b307a 100644
--- a/.github/workflows/downstream-users.lock.yml
+++ b/.github/workflows/downstream-users.lock.yml
@@ -36,9 +36,9 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"424da7c3b2e4613c9e1d1674e728af0e179502240dd71ddce244c5db0230a946"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"6c7c54eef66da79ace3f26a7c4cc39896e2319c7f86597f1a15baeb27def7f4b"}
 
-name: "Downstream Users"
+name: "Internal: Downstream Users"
 "on":
   # bots: # Bots processed as bot check in pre-activation job
   # - github-actions[bot] # Bots processed as bot check in pre-activation job
@@ -57,7 +57,7 @@ concurrency:
   cancel-in-progress: true
   group: downstream-users
 
-run-name: "Downstream Users"
+run-name: "Internal: Downstream Users"
 
 jobs:
   activation:
@@ -555,7 +555,7 @@ jobs:
               model: "gpt-5.3-codex",
               version: "",
               agent_version: "0.0.412",
-              workflow_name: "Downstream Users",
+              workflow_name: "Internal: Downstream Users",
               experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
@@ -1247,7 +1247,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Downstream Users"
+          GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1260,7 +1260,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Downstream Users"
+          GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1273,7 +1273,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Downstream Users"
+          GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_WORKFLOW_ID: "downstream-users"
@@ -1293,7 +1293,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Downstream Users"
+          GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_NOOP_MESSAGE: ${{ steps.noop.outputs.noop_message }}
@@ -1310,7 +1310,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Downstream Users"
+          GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
@@ -1355,7 +1355,7 @@ jobs:
       - name: Setup threat detection
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
-          WORKFLOW_NAME: "Downstream Users"
+          WORKFLOW_NAME: "Internal: Downstream Users"
           WORKFLOW_DESCRIPTION: "Track downstream public repo usage of elastic/ai-github-actions and update data"
           HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
         with:
@@ -1438,7 +1438,7 @@ jobs:
       GH_AW_ENGINE_MODEL: "gpt-5.3-codex"
       GH_AW_SAFE_OUTPUT_MESSAGES: "{\"footer\":\"${{ inputs.messages-footer || '---\\n[What is this?](https://ela.st/github-ai-tools) | [From workflow: {workflow_name}]({run_url})\\n\\nGive us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.' }}\"}"
       GH_AW_WORKFLOW_ID: "downstream-users"
-      GH_AW_WORKFLOW_NAME: "Downstream Users"
+      GH_AW_WORKFLOW_NAME: "Internal: Downstream Users"
     outputs:
       create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}
       create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}
diff --git a/.github/workflows/downstream-users.md b/.github/workflows/downstream-users.md
index 235975c9..22af9f3d 100644
--- a/.github/workflows/downstream-users.md
+++ b/.github/workflows/downstream-users.md
@@ -1,6 +1,6 @@
 ---
 inlined-imports: true
-name: "Downstream Users"
+name: "Internal: Downstream Users"
 description: "Track downstream public repo usage of elastic/ai-github-actions and update data"
 imports:
   - gh-aw-fragments/elastic-tools.md
diff --git a/.github/workflows/minimize-resolved-pr-reviews.yml b/.github/workflows/minimize-resolved-pr-reviews.yml
index 1d05edfa..989d15ff 100644
--- a/.github/workflows/minimize-resolved-pr-reviews.yml
+++ b/.github/workflows/minimize-resolved-pr-reviews.yml
@@ -1,4 +1,4 @@
-name: Minimize Resolved Reviews
+name: "Internal: Minimize Resolved Reviews"
 
 on:
   pull_request_review:
diff --git a/.github/workflows/mkdocs.yml b/.github/workflows/mkdocs.yml
index 5f2f7d20..efe8998e 100644
--- a/.github/workflows/mkdocs.yml
+++ b/.github/workflows/mkdocs.yml
@@ -1,4 +1,4 @@
-name: Docs
+name: "Internal: Docs"
 
 on:
   push:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index fd7c34ed..921724ba 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@
 #   - elastic/ai-github-actions/...@v0       (latest v0.x.x)
 #   - elastic/ai-github-actions/...@v0.1.0   (exact version)
 
-name: Release
+name: "Internal: Release"
 
 on:
   push:
diff --git a/.github/workflows/smoke-test-install.yml b/.github/workflows/smoke-test-install.yml
index ef9481da..883abba3 100644
--- a/.github/workflows/smoke-test-install.yml
+++ b/.github/workflows/smoke-test-install.yml
@@ -1,5 +1,5 @@
 ---
-name: Smoke Test — Install & Compile
+name: "Internal: Smoke Test — Install & Compile"
 on:
   schedule:
     - cron: "0 6 * * *" # Daily at 06:00 UTC
diff --git a/.github/workflows/upgrade-check.lock.yml b/.github/workflows/upgrade-check.lock.yml
index 7a5d2491..192926ff 100644
--- a/.github/workflows/upgrade-check.lock.yml
+++ b/.github/workflows/upgrade-check.lock.yml
@@ -35,9 +35,9 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"d85bf62cf7a9ed448e8c9f549210273fe939479eef73873eed65cdcc9a669735"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"d9f8c428fbb9cd161ca9b444266cd33a65f35f6b3af867b7af7426d20dc7bc36"}
 
-name: "Upgrade Check"
+name: "Internal: Upgrade Check"
 "on":
   # bots: # Bots processed as bot check in pre-activation job
   # - github-actions[bot] # Bots processed as bot check in pre-activation job
@@ -56,7 +56,7 @@ concurrency:
   cancel-in-progress: true
   group: upgrade-check
 
-run-name: "Upgrade Check"
+run-name: "Internal: Upgrade Check"
 
 jobs:
   activation:
@@ -602,7 +602,7 @@ jobs:
               model: "gpt-5.3-codex",
               version: "",
               agent_version: "0.0.412",
-              workflow_name: "Upgrade Check",
+              workflow_name: "Internal: Upgrade Check",
               experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
@@ -1186,7 +1186,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Upgrade Check"
+          GH_AW_WORKFLOW_NAME: "Internal: Upgrade Check"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1199,7 +1199,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Upgrade Check"
+          GH_AW_WORKFLOW_NAME: "Internal: Upgrade Check"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1212,7 +1212,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Upgrade Check"
+          GH_AW_WORKFLOW_NAME: "Internal: Upgrade Check"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_WORKFLOW_ID: "upgrade-check"
@@ -1231,7 +1231,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Upgrade Check"
+          GH_AW_WORKFLOW_NAME: "Internal: Upgrade Check"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_NOOP_MESSAGE: ${{ steps.noop.outputs.noop_message }}
@@ -1279,7 +1279,7 @@ jobs:
       - name: Setup threat detection
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
-          WORKFLOW_NAME: "Upgrade Check"
+          WORKFLOW_NAME: "Internal: Upgrade Check"
           WORKFLOW_DESCRIPTION: "Check for gh-aw releases and assess whether our workflows need upgrading"
           HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
         with:
@@ -1359,7 +1359,7 @@ jobs:
       GH_AW_ENGINE_ID: "copilot"
       GH_AW_ENGINE_MODEL: "gpt-5.3-codex"
       GH_AW_WORKFLOW_ID: "upgrade-check"
-      GH_AW_WORKFLOW_NAME: "Upgrade Check"
+      GH_AW_WORKFLOW_NAME: "Internal: Upgrade Check"
     outputs:
       create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}
       create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}
diff --git a/.github/workflows/upgrade-check.md b/.github/workflows/upgrade-check.md
index f5dfffee..5f032630 100644
--- a/.github/workflows/upgrade-check.md
+++ b/.github/workflows/upgrade-check.md
@@ -1,6 +1,6 @@
 ---
 inlined-imports: true
-name: "Upgrade Check"
+name: "Internal: Upgrade Check"
 description: "Check for gh-aw releases and assess whether our workflows need upgrading"
 imports:
   - gh-aw-fragments/elastic-tools.md
diff --git a/.github/workflows/workflow-patrol.lock.yml b/.github/workflows/workflow-patrol.lock.yml
index b38f9251..2cf5b6da 100644
--- a/.github/workflows/workflow-patrol.lock.yml
+++ b/.github/workflows/workflow-patrol.lock.yml
@@ -35,9 +35,9 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"f9c1b3b00c0a586f3a7c4c72d9cfb13ffc496fc7665b012c2c5699108bb28a86"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"64ad835a05ab43c92b7b73efc91fd88e46066031bab4044ec3c927026d814d7b"}
 
-name: "Workflow Patrol"
+name: "Internal: Workflow Patrol"
 "on":
   # bots: # Bots processed as bot check in pre-activation job
   # - github-actions[bot] # Bots processed as bot check in pre-activation job
@@ -56,7 +56,7 @@ concurrency:
   cancel-in-progress: true
   group: workflow-patrol
 
-run-name: "Workflow Patrol"
+run-name: "Internal: Workflow Patrol"
 
 jobs:
   activation:
@@ -590,7 +590,7 @@ jobs:
               model: "gpt-5.3-codex",
               version: "",
               agent_version: "0.0.412",
-              workflow_name: "Workflow Patrol",
+              workflow_name: "Internal: Workflow Patrol",
               experimental: false,
               supports_tools_allowlist: true,
               run_id: context.runId,
@@ -1174,7 +1174,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_NOOP_MAX: 1
-          GH_AW_WORKFLOW_NAME: "Workflow Patrol"
+          GH_AW_WORKFLOW_NAME: "Internal: Workflow Patrol"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1187,7 +1187,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Workflow Patrol"
+          GH_AW_WORKFLOW_NAME: "Internal: Workflow Patrol"
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
@@ -1200,7 +1200,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Workflow Patrol"
+          GH_AW_WORKFLOW_NAME: "Internal: Workflow Patrol"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_WORKFLOW_ID: "workflow-patrol"
@@ -1219,7 +1219,7 @@ jobs:
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
-          GH_AW_WORKFLOW_NAME: "Workflow Patrol"
+          GH_AW_WORKFLOW_NAME: "Internal: Workflow Patrol"
           GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
           GH_AW_AGENT_CONCLUSION: ${{ needs.agent.result }}
           GH_AW_NOOP_MESSAGE: ${{ steps.noop.outputs.noop_message }}
@@ -1267,7 +1267,7 @@ jobs:
       - name: Setup threat detection
         uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
         env:
-          WORKFLOW_NAME: "Workflow Patrol"
+          WORKFLOW_NAME: "Internal: Workflow Patrol"
           WORKFLOW_DESCRIPTION: "Detect workflow drift — where one or more workflows have fallen behind a pattern adopted by most others"
           HAS_PATCH: ${{ needs.agent.outputs.has_patch }}
         with:
@@ -1347,7 +1347,7 @@ jobs:
       GH_AW_ENGINE_ID: "copilot"
       GH_AW_ENGINE_MODEL: "gpt-5.3-codex"
       GH_AW_WORKFLOW_ID: "workflow-patrol"
-      GH_AW_WORKFLOW_NAME: "Workflow Patrol"
+      GH_AW_WORKFLOW_NAME: "Internal: Workflow Patrol"
     outputs:
       create_discussion_error_count: ${{ steps.process_safe_outputs.outputs.create_discussion_error_count }}
       create_discussion_errors: ${{ steps.process_safe_outputs.outputs.create_discussion_errors }}
diff --git a/.github/workflows/workflow-patrol.md b/.github/workflows/workflow-patrol.md
index dcbe695a..6a29e5d1 100644
--- a/.github/workflows/workflow-patrol.md
+++ b/.github/workflows/workflow-patrol.md
@@ -1,6 +1,6 @@
 ---
 inlined-imports: true
-name: "Workflow Patrol"
+name: "Internal: Workflow Patrol"
 description: "Detect workflow drift — where one or more workflows have fallen behind a pattern adopted by most others"
 imports:
   - gh-aw-fragments/elastic-tools.md