From 86aee6badb8e953a5de6a93d18812afc2491b9aa Mon Sep 17 00:00:00 2001
From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com>
Date: Fri, 6 Nov 2026 13:26:47 +0000
Subject: [PATCH] fix(ci): preserve the standalone PCC workspace

---
 Cargo.toml                     | 1 +
 docs/PROVENANCE-EXHIBIT-B.adoc | 7 +++++--
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index 456068d..5b195f1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -42,6 +42,7 @@ required-features = ["gossamer"]
 [workspace]
 members = ["crates/provenance"]
 default-members = [".", "crates/provenance"]
+exclude = ["tools/pcc"]
 resolver = "2"
 
 [features]
diff --git a/docs/PROVENANCE-EXHIBIT-B.adoc b/docs/PROVENANCE-EXHIBIT-B.adoc
index 535813b..a364e1c 100644
--- a/docs/PROVENANCE-EXHIBIT-B.adoc
+++ b/docs/PROVENANCE-EXHIBIT-B.adoc
@@ -113,8 +113,11 @@ workflows after their owner moved. The selected-actions policy now admits
 the full reusable-workflow paths at the existing `metadatastician/standards` revisions
 `412a7031577112b31ee287cc6060179d638d6500` and
 `e064539116c2dcfdf282a4749dbd58c69961c7e6`, plus the exact third-party action
-commits already recorded in `actions.lock`. The admissions were exported
-through the canonical Kyaml parser. Existing action allowances and the
+commits already recorded in `actions.lock` or in the frozen Rust reusable
+workflow at `412a7031577112b31ee287cc6060179d638d6500`. Lockfile admissions
+were exported through the canonical Kyaml parser; the reusable workflow's
+toolchain/cache commits were checked against that exact revision.
+Existing action allowances and the
 mandatory SHA-pinning setting are preserved. Admission is not a test receipt;
 the actual hosted runs still determine whether the workflows passed.