From 53925dfa82de60a565a1c9301f7a7c20994f45b5 Mon Sep 17 00:00:00 2001
From: durable-workflow automation <support@durable-workflow.com>
Date: Wed, 12 Aug 2026 00:41:51 +0000
Subject: [PATCH] Reconcile protected recovery workflow authority

---
 release-recovery/authority.json               | 78 +++++++++----------
 .../protected-source-identities.json          | 22 ++++++
 2 files changed, 61 insertions(+), 39 deletions(-)

diff --git a/release-recovery/authority.json b/release-recovery/authority.json
index dc4e792..fb57d98 100644
--- a/release-recovery/authority.json
+++ b/release-recovery/authority.json
@@ -1,63 +1,63 @@
 {
   "schema": "durable-workflow.component-release-recovery-authority/v2",
   "source": {
-    "repository": "durable-workflow/.github",
-    "ref": "refs/heads/main",
     "path": "release-recovery/authority.json",
     "qualification": {
-      "workflow": ".github/workflows/beta-candidate.yml",
-      "event": "push"
-    }
+      "event": "push",
+      "workflow": ".github/workflows/beta-candidate.yml"
+    },
+    "ref": "refs/heads/main",
+    "repository": "durable-workflow/.github"
   },
   "workflows": {
-    "workflow": {
-      "repository": "durable-workflow/workflow",
-      "ref": "refs/heads/v2",
-      "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "133b519f71aee37b00fe3e96cf8177190ea50ca98211d9a69e9c7dc632ae281d"
-    },
-    "waterline": {
-      "repository": "durable-workflow/waterline",
-      "ref": "refs/heads/v2",
+    "cli": {
       "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "90f68dad2ec05d48aadbd1bb144e809ffce67f974020ec7685add81495424ed2"
-    },
-    "server": {
-      "repository": "durable-workflow/server",
       "ref": "refs/heads/main",
-      "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "37ef78fd199d9354d5faa6c157414cdce1695a2225e3209e7041c2517876379e"
-    },
-    "cli": {
       "repository": "durable-workflow/cli",
-      "ref": "refs/heads/main",
-      "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "c19453ac7807422fb58d4f6f8f2b8da41f705b0203abef39ae6e0b396f5c07b2"
+      "sha256": "c19453ac7807422fb58d4f6f8f2b8da41f705b0203abef39ae6e0b396f5c07b2",
+      "state": "active"
     },
     "sdk-php": {
-      "repository": "durable-workflow/sdk-php",
-      "ref": "refs/heads/main",
       "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "02874a395b9402dc5d7c3c8b521a26637cd6fe66c513dd69e3fd3e1e8d506565"
+      "ref": "refs/heads/main",
+      "repository": "durable-workflow/sdk-php",
+      "sha256": "02874a395b9402dc5d7c3c8b521a26637cd6fe66c513dd69e3fd3e1e8d506565",
+      "state": "active"
     },
     "sdk-python": {
-      "repository": "durable-workflow/sdk-python",
-      "ref": "refs/heads/main",
       "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "6045b3131dae466f17308e50f65067b8664aedba46a5694ee6a2e82810020fa5"
+      "ref": "refs/heads/main",
+      "repository": "durable-workflow/sdk-python",
+      "sha256": "6045b3131dae466f17308e50f65067b8664aedba46a5694ee6a2e82810020fa5",
+      "state": "active"
     },
     "sdk-rust": {
+      "path": ".github/workflows/release-plan-recovery.yml",
+      "ref": "refs/heads/main",
       "repository": "durable-workflow/sdk-rust",
+      "sha256": "c43b0e100c388301af12b9f5e9354955ff6c31b3156b4a0b66a8c3379516645c",
+      "state": "active"
+    },
+    "server": {
+      "path": ".github/workflows/release-plan-recovery.yml",
       "ref": "refs/heads/main",
+      "repository": "durable-workflow/server",
+      "sha256": "37ef78fd199d9354d5faa6c157414cdce1695a2225e3209e7041c2517876379e",
+      "state": "active"
+    },
+    "waterline": {
       "path": ".github/workflows/release-plan-recovery.yml",
-      "state": "active",
-      "sha256": "c43b0e100c388301af12b9f5e9354955ff6c31b3156b4a0b66a8c3379516645c"
+      "ref": "refs/heads/v2",
+      "repository": "durable-workflow/waterline",
+      "sha256": "b46b5139c6ed94c108a9096c32d67401460269e990020169456c1ca21e6bf8ac",
+      "state": "active"
+    },
+    "workflow": {
+      "path": ".github/workflows/release-plan-recovery.yml",
+      "ref": "refs/heads/v2",
+      "repository": "durable-workflow/workflow",
+      "sha256": "133b519f71aee37b00fe3e96cf8177190ea50ca98211d9a69e9c7dc632ae281d",
+      "state": "active"
     }
   }
 }
diff --git a/release-recovery/protected-source-identities.json b/release-recovery/protected-source-identities.json
index 258130e..28a24d3 100644
--- a/release-recovery/protected-source-identities.json
+++ b/release-recovery/protected-source-identities.json
@@ -178,6 +178,28 @@
             "sha256": "c702d5dadce236ce96b39f0c086728a6882d3f54a5349f3871a0ea8899bccb6b",
             "source_commit": "fa28853fe0e12743d0159eb29497d95b4e7d2d57"
           }
+        },
+        {
+          "qualification": {
+            "check_run_id": 93969762744,
+            "check_url": "https://github.com/durable-workflow/waterline/actions/runs/31549301611/job/93969762744",
+            "conclusion": "success",
+            "event": "push",
+            "head_branch": "v2",
+            "head_sha": "d3c7b1bdfe4514dab92d05347ab3a134861574dd",
+            "required_check": "Target branch qualification",
+            "run_attempt": 1,
+            "run_id": 31549301611,
+            "status": "completed",
+            "url": "https://github.com/durable-workflow/waterline/actions/runs/31549301611",
+            "workflow": ".github/workflows/php.yml"
+          },
+          "sha256": "b46b5139c6ed94c108a9096c32d67401460269e990020169456c1ca21e6bf8ac",
+          "source_commit": "d3c7b1bdfe4514dab92d05347ab3a134861574dd",
+          "supersedes": {
+            "sha256": "90f68dad2ec05d48aadbd1bb144e809ffce67f974020ec7685add81495424ed2",
+            "source_commit": "bcd3f627d3f2af5c2b2cd5663653b3049f490fc2"
+          }
         }
       ],
       "path": ".github/workflows/release-plan-recovery.yml",