diff --git a/.github/workflows/verify-conformance.yml b/.github/workflows/verify-conformance.yml
index d0ef9dc..a8543cd 100644
--- a/.github/workflows/verify-conformance.yml
+++ b/.github/workflows/verify-conformance.yml
@@ -52,9 +52,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           repository: fells-code/seamless-auth-server
-          # The server's integration branch is `dev` (where fixes land and the beta
-          # publishes from); its `main` lags. Default to `dev` when no ref is passed.
-          ref: ${{ inputs.server-ref || 'dev' }}
+          ref: ${{ inputs.server-ref }}
           path: seamless-auth-server
 
       - name: Checkout seamless-auth-react
diff --git a/AGENTS.md b/AGENTS.md
index c71ffd9..a1c53e1 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -137,8 +137,8 @@ Modes and sibling repos:
 
 ## Known Maintenance Traps
 
-- **Sibling-repo branches**: the server's integration branch is `dev` (its `main` lags), so the verify
-  CI workflow defaults the server checkout to `dev`. The api, react SDK, and seamless-templates use `main`.
+- **Sibling-repo branches**: every sibling repo (api, server, react SDK, seamless-templates) is checked out
+  at its default branch (`main`) when no explicit `*-ref` is passed to the verify CI workflow.
 - **`--local` needs SDK dependencies**: it builds the server (pnpm) and the React SDK (npm) from source
   on the host, so those repos must have their dependencies installed first. CI installs them explicitly.
 - **OAuth mock networking**: the in-process mock OIDC is reached by the browser and harness via