diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7ae8b2a..6c93a7c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,8 +16,13 @@ env:
   # pins, unpinned `main` of relay/rivet can change tool behavior on this
   # workflow with zero wohl code change (see #8 for the concrete
   # incident that motivated pinning).
-  RELAY_REF: 4d42acf4a23c56980091f943c966ae5e0223a79f
-  RIVET_REF: 335bb84be0bb1be3768438ecec109c945c6b6530
+  #
+  # IMPORTANT: every cross-repo checkout below uses `fetch-depth: 0`
+  # because relay/rivet are routinely force-pushed by the architect.
+  # Without a full fetch, an orphaned (rebased-away) SHA fails to
+  # resolve under actions/checkout's default shallow strategy.
+  RELAY_REF: 178ffd479ad863c91ece4f580379a9207c36a530
+  RIVET_REF: 78f001e23d595ba816f7a7be59282194dedfdc12
 
 jobs:
   lint:
@@ -32,6 +37,7 @@ jobs:
           repository: pulseengine/relay
           path: relay
           ref: ${{ env.RELAY_REF }}
+          fetch-depth: 0
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: "1.85.0"
@@ -66,6 +72,7 @@ jobs:
           repository: pulseengine/relay
           path: relay
           ref: ${{ env.RELAY_REF }}
+          fetch-depth: 0
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: "1.85.0"
@@ -88,6 +95,7 @@ jobs:
           repository: pulseengine/relay
           path: relay
           ref: ${{ env.RELAY_REF }}
+          fetch-depth: 0
       # Kani-verifier (the installer) needs newer Rust than our MSRV.
       # Kani itself uses an internal nightly for the proofs.
       - uses: dtolnay/rust-toolchain@stable
@@ -130,6 +138,7 @@ jobs:
           repository: pulseengine/relay
           path: relay
           ref: ${{ env.RELAY_REF }}
+          fetch-depth: 0
       - uses: dtolnay/rust-toolchain@master
         with:
           toolchain: nightly
@@ -161,6 +170,7 @@ jobs:
           repository: pulseengine/rivet
           path: rivet
           ref: ${{ env.RIVET_REF }}
+          fetch-depth: 0
       # rivet-cli's deps need Rust 1.89+; we don't care about MSRV for tooling.
       - uses: dtolnay/rust-toolchain@stable
       - uses: Swatinem/rust-cache@v2