ci: pin PR base snapshot validation (#12450)

## Summary

- rotate the thin caller from `5ac66b3fdd5dc22c0c4e5fdb234ac063cf1d9ff8`
to `c119c4bee6ebb9c81791d7a6994f1be06d7cc22b`
- keep both exact SHAs authorized during rotation
- keep AWS routing disabled until verification completes

## Validation

- actionlint passes
- workflow-contract tests pass
- internal trust-routing harness passes
This commit is contained in:
Dotta 2026-08-28 11:36:35 -05:00 committed by GitHub
parent c119c4bee6
commit 66e1c0df8b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions

View File

@ -12,4 +12,4 @@ permissions:
jobs:
ci:
uses: paperclipai/paperclip/.github/workflows/pr-trusted.yml@5ac66b3fdd5dc22c0c4e5fdb234ac063cf1d9ff8
uses: paperclipai/paperclip/.github/workflows/pr-trusted.yml@c119c4bee6ebb9c81791d7a6994f1be06d7cc22b