From a418d9b902a802ed85f4e9f40f6674cb1e998d21 Mon Sep 17 00:00:00 2001
From: Jon Langevin <codingsloth@pm.me>
Date: Wed, 14 Oct 2026 21:28:17 -0400
Subject: [PATCH] ci: adopt staged policy Go 1.27.2 floor

---
 .github/public-workflow-executable-allowlist.json | 4 ++--
 .github/workflows/policytool/go.mod               | 2 +-
 scripts/check-public-workflow-policy.sh           | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/public-workflow-executable-allowlist.json b/.github/public-workflow-executable-allowlist.json
index 60b1d16a..cb171fe7 100644
--- a/.github/public-workflow-executable-allowlist.json
+++ b/.github/public-workflow-executable-allowlist.json
@@ -27,7 +27,7 @@
     "contextSHA256": "d804de818453d79cf9b6434ea2780dac8a4434b4dd32bd9d46be17620fc25066",
     "path": "scripts/check-public-workflow-policy.sh",
     "rationale": "Stage the exact approved Go1.27.2 canonical policy context. Existing executable/statement/action authority is preserved; adoption and promotion remain separate.",
-    "sha256": "2cf3f0461ceed4a3e32265ccad7fd3ac1ae4e162d1f2cb19ba9b8737405db02a",
+    "sha256": "48ab26cade210aad60b5fab5bf49c2faad89c8b5ea291b34830b28a50512822e",
     "state": "active",
     "workflowPath": ".github/workflows/public-workflow-policy.yml"
   },
@@ -51,7 +51,7 @@
     "path": "scripts/check-public-workflow-policy.sh",
     "workflowPath": ".github/workflows/ci.yml",
     "contextSHA256": "cd51e6225760668a51b92c71f4b40d362fe0a957b7aae04d7421a1c1282ee386",
-    "sha256": "2cf3f0461ceed4a3e32265ccad7fd3ac1ae4e162d1f2cb19ba9b8737405db02a",
+    "sha256": "48ab26cade210aad60b5fab5bf49c2faad89c8b5ea291b34830b28a50512822e",
     "state": "active",
     "rationale": "Staged v0.86 CI authority. Enforces the credential-free public workflow boundary in CI."
   },
diff --git a/.github/workflows/policytool/go.mod b/.github/workflows/policytool/go.mod
index 9bb28e4e..6195995f 100644
--- a/.github/workflows/policytool/go.mod
+++ b/.github/workflows/policytool/go.mod
@@ -1,6 +1,6 @@
 module github.com/GoCodeAlone/workflow/.github/workflows/policytool
 
-go 1.26.5
+go 1.27.2
 
 require (
 	gopkg.in/yaml.v3 v3.0.1
diff --git a/scripts/check-public-workflow-policy.sh b/scripts/check-public-workflow-policy.sh
index cdf9fa13..2b76a387 100755
--- a/scripts/check-public-workflow-policy.sh
+++ b/scripts/check-public-workflow-policy.sh
@@ -76,7 +76,7 @@ verify_policytool() {
   verify_policytool_layout
   verify_policytool_file main.go 9c38f6e1a92d34d31cd73ba2bd2b092216ab9c115af79a0ef5ec13343c4f4d2d
   verify_policytool_file main_test.go fadde1edd916918a69f912177a74565a6138ed935aae3509d7c6082924467778
-  verify_policytool_file go.mod 0a2d135980310757f36e733161b94498b4e0a1b6ac8c6de8a799f542d6c9ddb8
+  verify_policytool_file go.mod 65717c7073e6a6532e6e687ada4bed681081b3c9c565f78b84560e89005353b4
   verify_policytool_file go.sum 790ef858e5aeed12269a69e764ac69c02c3877678b0e7d9384ad3728b6e09f6c
 }