Function process_perf 

pub fn process_perf(pc_id: &str) -> String

process_perf.<pc_id> — Phase 2: top-N per-process snapshot published only while process_perf_enabled is true AND the process_perf_expires_at deadline is in the future. Separate subject from host_perf.<pc_id> because process-perf is an opt-in investigation mode — having its own subject lets the projector skip the heavy table entirely for hosts that never turn it on.