From f8964be5816ca47a53d6b25d3ad658a160cb7413 Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Tue, 6 Oct 2026 15:35:58 +0100
Subject: [PATCH] =?UTF-8?q?test(ci):=20DO=20NOT=20MERGE=20=E2=80=94=20posi?=
 =?UTF-8?q?tive=20control=20for=20the=20Lock-Floor=20ruleset?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Repins one checkout step in affinescript-verify.yml to a real commit
(v6.0.2, de0fac2e) that actions.lock does not record. Both lock gates
(uses ⊆ actions.lock, governance / Actions lockfile verify) must go red
and, once Lock-Floor is active, this PR must report BLOCKED.
Committed with --no-verify on purpose: the local pre-commit lock gate
refuses this change, which is the point of the control.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012kgrMQRhSmZMBbF9Ui1zBw
---
 .github/workflows/affinescript-verify.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/affinescript-verify.yml b/.github/workflows/affinescript-verify.yml
index 14bf63735..8090f1be5 100644
--- a/.github/workflows/affinescript-verify.yml
+++ b/.github/workflows/affinescript-verify.yml
@@ -54,7 +54,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout standards
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0