diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2306aa3..c6672da 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -28,7 +28,11 @@
 # package repo. pnpm's own rationale for the number: "Since malware is usually
 # detected quickly, delaying updates by 24 hours will most likely prevent you
 # from installing a bad version" (https://pnpm.io/supply-chain-security).
+# @cosyte is exempt by operator decision; every third-party package keeps the floor.
 minimumReleaseAge: 1440
+minimumReleaseAgeExclude:
+  # reason: first-party @cosyte package, exempt from the floor by operator decision
+  - "@cosyte/*"
 
 # Fail the install when a package's trust evidence is weaker than that of an
 # earlier-published version of the same package (a trusted publisher that