From 9bd307fa2d9148ab4d5ab47c7a02550d74042829 Mon Sep 17 00:00:00 2001
From: schickling-assistant
 <261620128+schickling-assistant@users.noreply.github.com>
Date: Tue, 3 Nov 2026 22:55:45 +0100
Subject: [PATCH] Pin Fabric v0.9.4 identity rotation baseline

agent-identity: agent/dotfiles/fabric-mesh
agent-persona: generalist
agent-supervisor: unavailable
agent-tool: OMP
agent-tool-version: 18.12.5
agent-runtime: OMP 18.12.5
agent-model: anthropic/claude-opus-5-5
---
 flake.lock | 8 ++++----
 flake.nix  | 4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/flake.lock b/flake.lock
index 85b859c27fb..8244010c2b9 100644
--- a/flake.lock
+++ b/flake.lock
@@ -52,17 +52,17 @@
         ]
       },
       "locked": {
-        "lastModified": 1792912755,
-        "narHash": "sha256-Zs+3vv/BbQTFVbuMpC3+ENdnjVIDiOwlrPjyhP23RUk=",
+        "lastModified": 1793742712,
+        "narHash": "sha256-xQ0Fh8c+Ujf2BbSzs00rURaPRC9MNukbSBx89itl/SM=",
         "owner": "compoundingtech",
         "repo": "fabric",
-        "rev": "1e6e93e9a662a40749f91d63eeecc4e98de114bd",
+        "rev": "19e7f8964ce8305aeb8c200fb717967aa03f738f",
         "type": "github"
       },
       "original": {
         "owner": "compoundingtech",
         "repo": "fabric",
-        "rev": "1e6e93e9a662a40749f91d63eeecc4e98de114bd",
+        "rev": "19e7f8964ce8305aeb8c200fb717967aa03f738f",
         "type": "github"
       }
     },
diff --git a/flake.nix b/flake.nix
index 3b51b70b5a9..7e44d4dd86a 100644
--- a/flake.nix
+++ b/flake.nix
@@ -9,8 +9,8 @@
     # The runtime, Rust crates and native terminal library share one producer revision.
     pty.url = "github:compoundingtech/pty/79d526d1be4f77bb3764dc1d880492806f8a07fc";
     pty.inputs.nixpkgs.follows = "nixpkgs";
-    # Merged pairing stack, including the daemon-identity restricted client.
-    fabric.url = "github:compoundingtech/fabric/1e6e93e9a662a40749f91d63eeecc4e98de114bd";
+    # Fabric v0.9.4 includes bounded peer expiry and recoverable identity rotation.
+    fabric.url = "github:compoundingtech/fabric/19e7f8964ce8305aeb8c200fb717967aa03f738f";
     fabric.inputs.nixpkgs.follows = "nixpkgs";
     # Shared CI generators and the `otelite` collector used by release-integration.
     # Keep the build toolchain aligned with the source member in megarepo.kdl.