From 1f9712b242d6f515a5b17bb28b151df09cfecf96 Mon Sep 17 00:00:00 2001
From: Aleksey Safonov <55020240+safal207@users.noreply.github.com>
Date: Fri, 14 Aug 2026 14:49:44 +0700
Subject: [PATCH 1/2] ci: add canonical FCRP credential boundary caller

---
 .github/workflows/fcrp-credential-boundary.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 .github/workflows/fcrp-credential-boundary.yml

diff --git a/.github/workflows/fcrp-credential-boundary.yml b/.github/workflows/fcrp-credential-boundary.yml
new file mode 100644
index 0000000..a895d3c
--- /dev/null
+++ b/.github/workflows/fcrp-credential-boundary.yml
@@ -0,0 +1,18 @@
+name: FCRP Credential Boundary
+
+on:
+  push:
+    branches: [main, master, develop]
+  pull_request:
+    branches: [main, master, develop]
+
+permissions:
+  contents: read
+
+jobs:
+  credential-boundary:
+    uses: safal207/ContractGraph-QA/.github/workflows/credential-boundary-reusable.yml@783fd3e09d3ba30dc9eef3c74272d4d2b6874acb
+    permissions:
+      contents: read
+    with:
+      scanner-ref: 783fd3e09d3ba30dc9eef3c74272d4d2b6874acb

From de730cf17e090488f3a13c8cb74b5fabd643b26a Mon Sep 17 00:00:00 2001
From: Aleksey Safonov <55020240+safal207@users.noreply.github.com>
Date: Fri, 14 Aug 2026 15:05:44 +0700
Subject: [PATCH 2/2] chore: align FCRP caller with current provider head

---
 .github/workflows/fcrp-credential-boundary.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/fcrp-credential-boundary.yml b/.github/workflows/fcrp-credential-boundary.yml
index a895d3c..59f9c29 100644
--- a/.github/workflows/fcrp-credential-boundary.yml
+++ b/.github/workflows/fcrp-credential-boundary.yml
@@ -11,8 +11,8 @@ permissions:
 
 jobs:
   credential-boundary:
-    uses: safal207/ContractGraph-QA/.github/workflows/credential-boundary-reusable.yml@783fd3e09d3ba30dc9eef3c74272d4d2b6874acb
+    uses: safal207/ContractGraph-QA/.github/workflows/credential-boundary-reusable.yml@cc1d1e227bbb1a25776819e6f2829bfb7a66ee58
     permissions:
       contents: read
     with:
-      scanner-ref: 783fd3e09d3ba30dc9eef3c74272d4d2b6874acb
+      scanner-ref: cc1d1e227bbb1a25776819e6f2829bfb7a66ee58