diff --git a/README.md b/README.md
index d2af04a..5b85a6a 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ Vibeflow is not another workflow builder or MCP server. It is a deterministic qu
 ## Quick start
 
 ```bash
-npx --yes github:domfelipe/vibeflow-n8n#v0.8.0 check workflow.json
+npx --yes github:domfelipe/vibeflow-n8n#4998605ed7dc12b9b867d69d7005d25778c7e109 check workflow.json
 ```
 
 Or from a checkout:
@@ -73,8 +73,8 @@ Directories are searched recursively for `*.workflow.json` files.
 ### GitHub Action
 
 ```yaml
-- uses: actions/checkout@v4
-- uses: domfelipe/vibeflow-n8n@v0.8.0
+- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+- uses: domfelipe/vibeflow-n8n@4998605ed7dc12b9b867d69d7005d25778c7e109 # v0.8.0 code
   with:
     path: workflows/
     output: vibeflow.sarif
@@ -83,7 +83,7 @@ Directories are searched recursively for `*.workflow.json` files.
 ## Codex plugin
 
 ```bash
-codex plugin marketplace add domfelipe/vibeflow-n8n
+codex plugin marketplace add domfelipe/vibeflow-n8n --ref 4998605ed7dc12b9b867d69d7005d25778c7e109
 ```
 
 Install **Vibeflow** from the Plugins Directory, then ask:
diff --git a/docs/release-audit.md b/docs/release-audit.md
index c5b3b81..6dc7d23 100644
--- a/docs/release-audit.md
+++ b/docs/release-audit.md
@@ -41,7 +41,7 @@ At the 5,000-node limit, the corrected linear traversal completed the synthetic
 - The package has no runtime dependencies and uses a publish allowlist.
 - The bundled action always enables `--locked`.
 
-The first merge SHA must replace mutable self-references in the README and Codex skill before the release tag is created.
+The first merge SHA, `4998605ed7dc12b9b867d69d7005d25778c7e109`, pins the CLI, GitHub Action, and Codex marketplace examples before the release tag is created.
 
 ## Residual limitations
 
diff --git a/plugins/vibeflow/skills/vibeflow/SKILL.md b/plugins/vibeflow/skills/vibeflow/SKILL.md
index aedc652..16d1ca1 100644
--- a/plugins/vibeflow/skills/vibeflow/SKILL.md
+++ b/plugins/vibeflow/skills/vibeflow/SKILL.md
@@ -19,7 +19,7 @@ Use the CLI as the source of truth. Do not infer that a workflow is safe from it
    For a released version without a checkout:
 
    ```bash
-   npx --yes github:domfelipe/vibeflow-n8n#v0.8.0 check path/to/workflow.json
+   npx --yes github:domfelipe/vibeflow-n8n#4998605ed7dc12b9b867d69d7005d25778c7e109 check path/to/workflow.json
    ```
 
 3. Read [references/policies.md](references/policies.md) when interpreting or repairing a finding.