rhi

Coordinated trade for connected markets
git clone https://radroots.dev/git/rhi.git
Log | Files | Refs | README | LICENSE
commit 336f708bfbf4d56b1edfb5dbfded12663aa44cac
parent 3fcba60d5f3639e06e88999fdd4d3eb4d9d014eb
Author: triesap <tyson@radroots.org>
Date:   Mon, 24 Aug 2026 03:05:19 +0000

build: align RHI to exact tag selector source

- advance every governed Lib dependency to the published exact-tag revision
- bind the service source lock to the verified Lib bundle and Cargo lock digests
- update package, lifecycle, persistence, and release guards to the same pin
- preserve RHI behavior while qualifying the standalone capsule on the new source

Diffstat:

MCargo.lock | 28++++++++++++++--------------


MCargo.toml | 22+++++++++++-----------


Mradroots.service.source-lock.v2.toml | 6+++---


Mtests/build_policy.rs | 12++++++------


Mtests/services_hardening_config_lifecycle.rs | 2+-


Mtests/services_hardening_native_release.rs | 2+-


Mtests/services_hardening_runtime_foundation.rs | 2+-


Mtests/services_hardening_state_catalog.rs | 2+-


Mtests/services_hardening_state_host.rs | 4++--


Mtests/services_hardening_state_resilience.rs | 4++--


Mtests/services_hardening_trade_persistence.rs | 2+-


Mtests/services_hardening_wave_100_b.rs | 2+-


Mtests/source_guards.rs | 2+-


13 files changed, 45 insertions(+), 45 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
@@ -1576,7 +1576,7 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 [[package]]
 name = "radroots_blossom"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "mediatype",
  "serde",
@@ -1588,7 +1588,7 @@ dependencies = [
 [[package]]
 name = "radroots_core"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "rust_decimal",
  "serde",
@@ -1597,7 +1597,7 @@ dependencies = [
 [[package]]
 name = "radroots_event"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "hex",
  "jiff-tzdb",
@@ -1615,7 +1615,7 @@ dependencies = [
 [[package]]
 name = "radroots_event_codec"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "hex",
  "radroots_blossom",
@@ -1632,7 +1632,7 @@ dependencies = [
 [[package]]
 name = "radroots_identity"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "k256",
  "serde",
@@ -1642,7 +1642,7 @@ dependencies = [
 [[package]]
 name = "radroots_nostr"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "nostr",
  "radroots_event",
@@ -1656,7 +1656,7 @@ dependencies = [
 [[package]]
 name = "radroots_protocol"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "serde",
 ]
@@ -1664,7 +1664,7 @@ dependencies = [
 [[package]]
 name = "radroots_runtime_paths"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "serde",
  "thiserror 1.0.69",
@@ -1673,7 +1673,7 @@ dependencies = [
 [[package]]
 name = "radroots_secrets"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "chacha20poly1305",
  "serde",
@@ -1685,7 +1685,7 @@ dependencies = [
 [[package]]
 name = "radroots_service_host"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "bytes",
  "fs2",
@@ -1706,7 +1706,7 @@ dependencies = [
 [[package]]
 name = "radroots_service_sqlite"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "fs2",
  "futures",
@@ -1724,7 +1724,7 @@ dependencies = [
 [[package]]
 name = "radroots_storage"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "radroots_event",
  "radroots_event_codec",
@@ -1737,7 +1737,7 @@ dependencies = [
 [[package]]
 name = "radroots_trade"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "hex",
  "radroots_core",
@@ -1751,7 +1751,7 @@ dependencies = [
 [[package]]
 name = "radroots_transport"
 version = "0.1.0-alpha"
-source = "git+https://github.com/radrootslabs/lib?rev=7d7b454b4c9ed86569671993bd03ca868b676665#7d7b454b4c9ed86569671993bd03ca868b676665"
+source = "git+https://github.com/radrootslabs/lib?rev=79d7818c8fe22a425f9524b884ddf59d25f0ef89#79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 dependencies = [
  "radroots_event",
  "radroots_identity",
diff --git a/Cargo.toml b/Cargo.toml
@@ -51,17 +51,17 @@ service-host = []
 workspace = true
 
 [dependencies]
-radroots_event = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha", features = ["serde"] }
-radroots_event_codec = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha", features = ["json"] }
-radroots_nostr = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha", features = ["events"] }
-radroots_protocol = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
-radroots_runtime_paths = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
-radroots_service_host = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
-radroots_service_sqlite = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
-radroots_storage = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha", default-features = false }
-radroots_transport = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha", default-features = false, features = ["std"] }
-radroots_secrets = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
-radroots_trade = { git = "https://github.com/radrootslabs/lib", rev = "7d7b454b4c9ed86569671993bd03ca868b676665", version = "=0.1.0-alpha" }
+radroots_event = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha", features = ["serde"] }
+radroots_event_codec = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha", features = ["json"] }
+radroots_nostr = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha", features = ["events"] }
+radroots_protocol = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
+radroots_runtime_paths = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
+radroots_service_host = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
+radroots_service_sqlite = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
+radroots_storage = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha", default-features = false }
+radroots_transport = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha", default-features = false, features = ["std"] }
+radroots_secrets = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
+radroots_trade = { git = "https://github.com/radrootslabs/lib", rev = "79d7818c8fe22a425f9524b884ddf59d25f0ef89", version = "=0.1.0-alpha" }
 
 chacha20poly1305 = { version = "0.10" }
 clap = { version = "4", features = ["derive"] }
diff --git a/radroots.service.source-lock.v2.toml b/radroots.service.source-lock.v2.toml
@@ -2,12 +2,12 @@ schema = "radroots.service.source-lock.v2"
 contract_version = 2
 service = "rhi"
 repository = "https://github.com/radrootslabs/lib"
-revision = "7d7b454b4c9ed86569671993bd03ca868b676665"
+revision = "79d7818c8fe22a425f9524b884ddf59d25f0ef89"
 architecture = "radroots.crates.release.v2"
 workspace_catalog_sha256 = "deca0c080deae187ff8186c0708903e42f41ea57f77c5f91581e23aa561164a4"
 version = "0.1.0-alpha"
-source_archive_sha256 = "b425371c134be96cce46b37f7035d6212f1efe8cff50bef366631ba5632991b0"
-cargo_lock_sha256 = "465af24eddf8593416eb67802dd74a29baac4df8086449c19464078fffafd0e2"
+source_archive_sha256 = "6f95d80d5ecb9d026ba6f9145b60fff67e370b2c175c438537319278e6974fa6"
+cargo_lock_sha256 = "99d8cfcf6e50ec54e3557219ba5ffd0c999df3a17155ed609f2919efe21e2979"
 rust_version = "1.97.1"
 host_feature_profile = "service-host"
 
diff --git a/tests/build_policy.rs b/tests/build_policy.rs
@@ -43,7 +43,7 @@ fn source_lock_metadata_is_exact_and_nix_is_absent() {
 fn shared_host_packages_are_exactly_source_locked() {
     for dependency in ["radroots_service_host", "radroots_service_sqlite"] {
         assert!(MANIFEST.contains(&format!(
-            "{dependency} = {{ git = \"https://github.com/radrootslabs/lib\", rev = \"7d7b454b4c9ed86569671993bd03ca868b676665\", version = \"=0.1.0-alpha\" }}"
+            "{dependency} = {{ git = \"https://github.com/radrootslabs/lib\", rev = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\", version = \"=0.1.0-alpha\" }}"
         )));
     }
 }
@@ -51,7 +51,7 @@ fn shared_host_packages_are_exactly_source_locked() {
 #[test]
 fn shared_service_sqlite_is_the_only_catalog_authority() {
     assert!(MANIFEST.contains(
-        "radroots_service_sqlite = { git = \"https://github.com/radrootslabs/lib\", rev = \"7d7b454b4c9ed86569671993bd03ca868b676665\", version = \"=0.1.0-alpha\" }"
+        "radroots_service_sqlite = { git = \"https://github.com/radrootslabs/lib\", rev = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\", version = \"=0.1.0-alpha\" }"
     ));
     for forbidden in ["rusqlite", "libsqlite3-sys"] {
         assert!(
@@ -64,14 +64,14 @@ fn shared_service_sqlite_is_the_only_catalog_authority() {
 #[test]
 fn shared_storage_generation_type_is_exactly_source_locked() {
     assert!(MANIFEST.contains(
-        "radroots_storage = { git = \"https://github.com/radrootslabs/lib\", rev = \"7d7b454b4c9ed86569671993bd03ca868b676665\", version = \"=0.1.0-alpha\", default-features = false }"
+        "radroots_storage = { git = \"https://github.com/radrootslabs/lib\", rev = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\", version = \"=0.1.0-alpha\", default-features = false }"
     ));
 }
 
 #[test]
 fn shared_transport_spi_is_exactly_source_locked_without_serde() {
     assert!(MANIFEST.contains(
-        "radroots_transport = { git = \"https://github.com/radrootslabs/lib\", rev = \"7d7b454b4c9ed86569671993bd03ca868b676665\", version = \"=0.1.0-alpha\", default-features = false, features = [\"std\"] }"
+        "radroots_transport = { git = \"https://github.com/radrootslabs/lib\", rev = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\", version = \"=0.1.0-alpha\", default-features = false, features = [\"std\"] }"
     ));
 }
 
@@ -82,12 +82,12 @@ fn source_lock_binds_the_current_cargo_lock() {
         "schema = \"radroots.service.source-lock.v2\"\ncontract_version = 2\nservice = \"rhi\"\n"
     ));
     assert!(SOURCE_LOCK.contains(&format!("cargo_lock_sha256 = \"{digest}\"")));
-    assert!(SOURCE_LOCK.contains("revision = \"7d7b454b4c9ed86569671993bd03ca868b676665\""));
+    assert!(SOURCE_LOCK.contains("revision = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\""));
     assert!(SOURCE_LOCK.contains(
         "workspace_catalog_sha256 = \"deca0c080deae187ff8186c0708903e42f41ea57f77c5f91581e23aa561164a4\""
     ));
     assert!(SOURCE_LOCK.contains(
-        "source_archive_sha256 = \"b425371c134be96cce46b37f7035d6212f1efe8cff50bef366631ba5632991b0\""
+        "source_archive_sha256 = \"6f95d80d5ecb9d026ba6f9145b60fff67e370b2c175c438537319278e6974fa6\""
     ));
     assert!(SOURCE_LOCK.contains("\n[nix]\nmaterial = \"absent\"\n"));
     assert!(!SOURCE_LOCK.contains("flake_lock_sha256"));
diff --git a/tests/services_hardening_config_lifecycle.rs b/tests/services_hardening_config_lifecycle.rs
@@ -53,7 +53,7 @@ fn evidence(at: u64) -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentity) 
     let build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
diff --git a/tests/services_hardening_native_release.rs b/tests/services_hardening_native_release.rs
@@ -13,7 +13,7 @@ const SYSTEMD_UNIT: &str = include_str!("../packaging/systemd/rhi@.service");
 const RELEASE_ACCEPTANCE: &str = include_str!("../scripts/release-acceptance.sh");
 const XTASK_MANIFEST: &str = include_str!("../tools/xtask/Cargo.toml");
 
-const LIB_REVISION: &str = "7d7b454b4c9ed86569671993bd03ca868b676665";
+const LIB_REVISION: &str = "79d7818c8fe22a425f9524b884ddf59d25f0ef89";
 const LIB_REPOSITORY: &str = "https://github.com/radrootslabs/lib";
 
 #[test]
diff --git a/tests/services_hardening_runtime_foundation.rs b/tests/services_hardening_runtime_foundation.rs
@@ -81,7 +81,7 @@ fn evidence() -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentity) {
     let build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
diff --git a/tests/services_hardening_state_catalog.rs b/tests/services_hardening_state_catalog.rs
@@ -249,7 +249,7 @@ fn secret_object() -> SchemaObject {
 #[test]
 fn catalog_source_is_pure_pinned_and_uses_only_the_shared_authority() {
     assert!(MANIFEST.contains(
-        "radroots_service_sqlite = { git = \"https://github.com/radrootslabs/lib\", rev = \"7d7b454b4c9ed86569671993bd03ca868b676665\", version = \"=0.1.0-alpha\" }"
+        "radroots_service_sqlite = { git = \"https://github.com/radrootslabs/lib\", rev = \"79d7818c8fe22a425f9524b884ddf59d25f0ef89\", version = \"=0.1.0-alpha\" }"
     ));
     assert!(LIB_SOURCE.contains("mod state_catalog;"));
     assert!(!LIB_SOURCE.contains("pub mod state_catalog;"));
diff --git a/tests/services_hardening_state_host.rs b/tests/services_hardening_state_host.rs
@@ -60,7 +60,7 @@ fn migration_evidence() -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentit
     let build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
@@ -227,7 +227,7 @@ async fn missing_state_and_mismatched_evidence_fail_before_database_creation() {
     let invalid_build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
diff --git a/tests/services_hardening_state_resilience.rs b/tests/services_hardening_state_resilience.rs
@@ -73,7 +73,7 @@ fn migration_evidence() -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentit
     let build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
@@ -352,7 +352,7 @@ async fn exact_open_rejects_unexpected_migration_history_without_repair() {
     )
     .bind([0x44_u8; 32].as_slice())
     .bind("1111111111111111111111111111111111111111")
-    .bind("7d7b454b4c9ed86569671993bd03ca868b676665")
+    .bind("79d7818c8fe22a425f9524b884ddf59d25f0ef89")
     .execute(&mut connection)
     .await
     .expect("insert unexpected ledger row");
diff --git a/tests/services_hardening_trade_persistence.rs b/tests/services_hardening_trade_persistence.rs
@@ -66,7 +66,7 @@ fn migration_evidence() -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentit
         MigrationBuildIdentity::new(
             env!("CARGO_PKG_VERSION"),
             "1111111111111111111111111111111111111111",
-            "7d7b454b4c9ed86569671993bd03ca868b676665",
+            "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
             "rustc-test",
             "test-target",
             "service-host",
diff --git a/tests/services_hardening_wave_100_b.rs b/tests/services_hardening_wave_100_b.rs
@@ -92,7 +92,7 @@ fn migration_evidence() -> (MigrationAppliedAtUnixSeconds, MigrationBuildIdentit
     let build = MigrationBuildIdentity::new(
         env!("CARGO_PKG_VERSION"),
         "1111111111111111111111111111111111111111",
-        "7d7b454b4c9ed86569671993bd03ca868b676665",
+        "79d7818c8fe22a425f9524b884ddf59d25f0ef89",
         "rustc-test",
         "test-target",
         "service-host",
diff --git a/tests/source_guards.rs b/tests/source_guards.rs
@@ -43,7 +43,7 @@ fn rhi_manifest_exact_pins_radroots_contract() {
         );
         assert_eq!(
             dependency.get("rev").and_then(toml::Value::as_str),
-            Some("7d7b454b4c9ed86569671993bd03ca868b676665"),
+            Some("79d7818c8fe22a425f9524b884ddf59d25f0ef89"),
             "RHI must source-lock {name} to the exact promoted Lib revision"
         );
         assert_eq!(