diff --git a/.github/workflows/abi-drift.yml b/.github/workflows/abi-drift.yml
index 8fd813ca..075a9c6c 100644
--- a/.github/workflows/abi-drift.yml
+++ b/.github/workflows/abi-drift.yml
@@ -81,8 +81,6 @@ jobs:
 
       - name: Install Rust toolchain (stable)
         uses: dtolnay/rust-toolchain@v1
-        with:
-          toolchain: v1
         with:
           toolchain: stable
 
diff --git a/.github/workflows/governance.yml b/.github/workflows/governance.yml
index 16578c46..fc730fdb 100644
--- a/.github/workflows/governance.yml
+++ b/.github/workflows/governance.yml
@@ -35,4 +35,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42
diff --git a/.github/workflows/readme-derive.yml b/.github/workflows/readme-derive.yml
index 4684a108..3384d472 100644
--- a/.github/workflows/readme-derive.yml
+++ b/.github/workflows/readme-derive.yml
@@ -29,7 +29,7 @@ permissions:
 
 jobs:
   readme-derive:
-    # Pinned to the standards commit that introduced readme-derive-reusable.yml.
-    # Repin to include hyperpolymath/standards#476 (anchor-ID convention guard)
-    # once it lands on main; this repo's README.adoc already satisfies it.
-    uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@84355587cb2a1f86e6882de83514a32db2646e7a
+    # Pinned to a hyperpolymath/standards main commit that carries the gem
+    # install fix (asciidoctor:VER syntax) and the anchor-ID convention guard
+    # (standards#476); this repo's README.adoc satisfies both.
+    uses: hyperpolymath/standards/.github/workflows/readme-derive-reusable.yml@5a0891e9e58b785181a92e141505ca96ca987b42
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7543d56b..021a5bbd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -160,7 +160,6 @@ jobs:
   provenance:
     name: SLSA Provenance
     needs: [build]
-    runs-on: ubuntu-latest
     permissions:
       actions: read
       id-token: write