diff --git a/.github/workflows/verify-and-deploy-public-beta.yml b/.github/workflows/verify-and-deploy-public-beta.yml
index 54c337dff..50a0fdb48 100644
--- a/.github/workflows/verify-and-deploy-public-beta.yml
+++ b/.github/workflows/verify-and-deploy-public-beta.yml
@@ -147,15 +147,11 @@ jobs:
             echo "Generated release tag unexpectedly already exists." >&2
             exit 1
           fi
-          if [ "$(gh api "repos/${GITHUB_REPOSITORY}" --jq '.permissions.push')" != "true" ]; then
-            echo "The workflow token cannot create the final release record." >&2
-            exit 1
-          fi
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
           git tag -a "$ROSS_RELEASE_ID" -m "ROSS public beta release train preflight"
+          trap 'git tag --delete "$ROSS_RELEASE_ID" >/dev/null 2>&1 || true' EXIT
           git push --dry-run origin "refs/tags/${ROSS_RELEASE_ID}"
-          git tag --delete "$ROSS_RELEASE_ID"
 
       - name: Promote the rehearsed digests to public production
         if: inputs.promote_public
diff --git a/reports/release-manifest-v1.json b/reports/release-manifest-v1.json
index dcac23e11..635e3ccc3 100644
--- a/reports/release-manifest-v1.json
+++ b/reports/release-manifest-v1.json
@@ -52,8 +52,8 @@
     },
     {
       "path": ".github/workflows/verify-and-deploy-public-beta.yml",
-      "sha256": "69253489fffdf6b220f6ffea764c30e46510dd97730fb23e85400c9eaeba6c11",
-      "sizeBytes": 9544
+      "sha256": "2bae1574be2fd81bf97636e77d3810225ac016122ca463971b17511a9f8951fc",
+      "sizeBytes": 9367
     },
     {
       "path": ".github/workflows/verify-ontario-sources.yml",