diff --git a/.github/workflows/code-validation.yml b/.github/workflows/code-validation.yml
index 0e9e951..65f5eb8 100644
--- a/.github/workflows/code-validation.yml
+++ b/.github/workflows/code-validation.yml
@@ -10,8 +10,8 @@ permissions:
   contents: read
 jobs:
   composition:
-    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@1c8b37c80beb41f640982768ec27304a911e0b8e
+    uses: libre-ai/project-governance/.github/workflows/validate-composition.yml@5ef12472d043f3ed1799ca09cff89c27ff024d79
     with:
       target: collaborative-data-sync
       target_ref: ${{ github.sha }}
-      tooling_ref: 1c8b37c80beb41f640982768ec27304a911e0b8e
+      tooling_ref: 5ef12472d043f3ed1799ca09cff89c27ff024d79
diff --git a/project.v1.yaml b/project.v1.yaml
index a13b67b..a8958ef 100644
--- a/project.v1.yaml
+++ b/project.v1.yaml
@@ -30,7 +30,7 @@ non_goals:
 dependencies:
   - on: libre-ai/project-governance
     why: "Current fleet doctrine and reusable verification workflows."
-    pinned: "github:libre-ai/project-governance#1c8b37c80beb41f640982768ec27304a911e0b8e"
+    pinned: "github:libre-ai/project-governance#5ef12472d043f3ed1799ca09cff89c27ff024d79"
 maturity: idea
 confidence: medium
 exposure: idea