Update: pin Trust 1.2.0 and SpecSync 6.0.0

[0xLeif]

Summary

Class: pin-only. Moves the Trust gate to the stable 1.2.0 release so this repo runs SpecSync 6.0.0 as its contract toolchain.

Pin	Old	New
Trust action	CorvidLabs/trust@e0272543ad5c88ec75cea1e606cc2efa552af25b # v1.2.0-rc.4	CorvidLabs/trust@fcc889f54d8b4892a81af463c5a0250e2be66fc5 (v1.2.0)
SpecSync	inherited from the old Trust pin	6.0.0, inherited from the Trust 1.2.0 default

Trust 1.2.0 defaults specsync-version to 6.0.0, and its nested SpecSync action is already pinned to the v6.0.0 tag object, so consumers do not re-pin that nested SHA.

SpecSync: adopted at 6.0.0 via the Trust default, so there is no second pin that can drift.

SDD: not required. Trust's contract stage runs specsync check, and this diff is pins only.

Augur: unchanged. Attest: unchanged, left soft or skipped exactly as configured.

Test Plan

Run against the committed tree with the local specsync 6.0.0 binary:

• specsync --version reports specsync 6.0.0
• Trust contract gate (specsync check with this repo's require_coverage) exit 0
• YAML parse of every workflow file exit 0
• fledge lanes run verify exit 0
• Hosted Trust gate on this PR (not run locally)

Changed: 1 workflow file(s), 1 line(s). Leftover drift: none in tracked files outside .specsync/changes/** and .specsync/archive/** history.

Do not merge until reviewed.

🤖 Generated with Claude Code

https://claude.ai/code/session_01JNdwGkbfU1o5jk6LiPhcF2

[corvid-agent]

APPROVE exact tip 8df623b55463 — Trust/SpecSync pin to stable (Trust v1.2.0 / SpecSync 6.0.0 as applicable). Trust green; no FAILURE checks on tip.

CoS mention-triage 2026-09-09 22:18 MDT.