From 45326eb7c95c6d2abed7d29ab17972fbb5d0a72d Mon Sep 17 00:00:00 2001
From: Val Alexander <val@opencoven.ai>
Date: Sun, 20 Sep 2026 01:48:48 -0500
Subject: [PATCH] chore(conformance): repin authority to the merged freshness
 guard

---
 docs/phase1-conformance.md          |  4 ++--
 phase1-conformance.lock.json        | 10 +++++-----
 src/phase1-conformance-lock.test.ts |  8 ++++----
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/docs/phase1-conformance.md b/docs/phase1-conformance.md
index 588bba8f..b9a9a1a3 100644
--- a/docs/phase1-conformance.md
+++ b/docs/phase1-conformance.md
@@ -214,8 +214,8 @@ assignment, RPC decoder and primary/secondary exception pipeline. This fixture
 correction does not establish the protected installation failure's cause or
 relax the round-trip assertions.
 
-The lock now selects reviewed source `28821d4d035d7815df396b756c2e30ecb0d54f5e`,
-tree `f893c71be4fd0eec23c8739716441bd2f533d764`, including all 25 governed files
+The lock now selects reviewed source `8c3d7354ca86cce864029d3586356eaaf07908f0`,
+tree `34689f03042dee69d71f999114f569d9784e04a4`, including all 25 governed files
 and ten production deltas. The checkout regression exercises all five labels
 from that immutable revision. SDK rebinding, both scope rotations and fresh
 protected validation remain required; this binding alone is not acceptance.
diff --git a/phase1-conformance.lock.json b/phase1-conformance.lock.json
index 18f9551b..666ae9a5 100644
--- a/phase1-conformance.lock.json
+++ b/phase1-conformance.lock.json
@@ -18,11 +18,11 @@
   },
   "harness": {
     "repository": "OpenCoven/chat",
-    "revision": "28821d4d035d7815df396b756c2e30ecb0d54f5e"
+    "revision": "8c3d7354ca86cce864029d3586356eaaf07908f0"
   },
   "harnessAuthority": {
-    "revision": "28821d4d035d7815df396b756c2e30ecb0d54f5e",
-    "tree": "f893c71be4fd0eec23c8739716441bd2f533d764",
+    "revision": "8c3d7354ca86cce864029d3586356eaaf07908f0",
+    "tree": "34689f03042dee69d71f999114f569d9784e04a4",
     "files": [
       {
         "path": "scripts/phase1-conformance.mjs",
@@ -141,8 +141,8 @@
       },
       {
         "path": ".github/workflows/ci.yml",
-        "blob": "10ecf6020d9d118086b00d4c682cf8bd2562b68c",
-        "sha256": "8ab115f50c13ae6e9213737612334cc1c73e23362fc3dd60be9258c97081b9d5"
+        "blob": "8343e79c5fbdae9c6f1f02f1633366807911b300",
+        "sha256": "190f275f7b82815a1791bc3cf53f35293f9a8febf87ae800cdd6d999082f5f2f"
       },
       {
         "path": ".github/workflows/client-v1-conformance.yml",
diff --git a/src/phase1-conformance-lock.test.ts b/src/phase1-conformance-lock.test.ts
index 28ad40b2..9a72369a 100644
--- a/src/phase1-conformance-lock.test.ts
+++ b/src/phase1-conformance-lock.test.ts
@@ -80,8 +80,8 @@ const committedHarnessAuthority = JSON.parse(
   readFileSync(resolve(projectRoot, 'phase1-conformance.lock.json'), 'utf8'),
 ).harnessAuthority;
 const expectedBehaviorAuthority = {
-  revision: '28821d4d035d7815df396b756c2e30ecb0d54f5e',
-  tree: 'f893c71be4fd0eec23c8739716441bd2f533d764',
+  revision: '8c3d7354ca86cce864029d3586356eaaf07908f0',
+  tree: '34689f03042dee69d71f999114f569d9784e04a4',
   files: [
     {
       path: 'scripts/owned-temp-directory.mjs',
@@ -130,8 +130,8 @@ const expectedBehaviorAuthority = {
     },
     {
       path: '.github/workflows/ci.yml',
-      blob: '10ecf6020d9d118086b00d4c682cf8bd2562b68c',
-      sha256: '8ab115f50c13ae6e9213737612334cc1c73e23362fc3dd60be9258c97081b9d5',
+      blob: '8343e79c5fbdae9c6f1f02f1633366807911b300',
+      sha256: '190f275f7b82815a1791bc3cf53f35293f9a8febf87ae800cdd6d999082f5f2f',
     },
     {
       path: '.github/workflows/client-v1-conformance.yml',