diff --git a/.github/workflows/dev-lead.yml b/.github/workflows/dev-lead.yml
index 8d6112e7..78c315e6 100644
--- a/.github/workflows/dev-lead.yml
+++ b/.github/workflows/dev-lead.yml
@@ -43,7 +43,8 @@ permissions: {}
 
 jobs:
   dev-lead:
-    uses: petry-projects/.github-private/.github/workflows/dev-lead-reusable.yml@5a9a2476575cfcf0e730993f589587db054219f1 # main
+    # First-party channel tag — do NOT SHA-pin (AGENTS.md mutable-ref exception; rings #499/#500/#871).
+    uses: petry-projects/.github-private/.github/workflows/dev-lead-reusable.yml@dev-lead/ring1
     secrets: inherit
     permissions:
       contents: write
@@ -51,4 +52,4 @@ jobs:
       issues: write
       actions: read
       checks: read
-      statuses: read
+      statuses: read
\ No newline at end of file