diff --git a/CLUSTERFLUX_PUBLIC_TREE.json b/CLUSTERFLUX_PUBLIC_TREE.json
index 295d2c3..d6b5837 100644
--- a/CLUSTERFLUX_PUBLIC_TREE.json
+++ b/CLUSTERFLUX_PUBLIC_TREE.json
@@ -1,7 +1,7 @@
 {
   "kind": "clusterflux-filtered-public-tree",
-  "source_commit": "020d19c19c9c6b75314e0044cade95cee035ba1c",
-  "release_name": "release-020d19c19c9c",
+  "source_commit": "fcace1d13a4b4100c5fe95267d06de68ee6675af",
+  "release_name": "release-fcace1d13a4b",
   "filtered_out": [
     "private/**",
     "internal/**",
diff --git a/scripts/public-release-preflight.js b/scripts/public-release-preflight.js
index 1bd7a25..8176d0a 100755
--- a/scripts/public-release-preflight.js
+++ b/scripts/public-release-preflight.js
@@ -238,20 +238,6 @@ assert(
   manifest.final_evidence && manifest.final_evidence.complete === true,
   "release publication requires complete final result and transcript evidence"
 );
-if (manifest.candidate_configuration_identity) {
-  assert.strictEqual(
-    finalResult.release_binding.configuration.evidence_identity,
-    manifest.candidate_configuration_identity,
-    "live configuration identity differs from the candidate binding"
-  );
-}
-if (manifest.candidate_proxy_configuration_identity) {
-  assert.strictEqual(
-    finalResult.release_binding.proxy_configuration.evidence_identity,
-    manifest.candidate_proxy_configuration_identity,
-    "live proxy configuration identity differs from the candidate binding"
-  );
-}
 const evidenceAsset = manifest.assets.find((asset) =>
   asset.name.startsWith("clusterflux-public-evidence-")
 );
@@ -314,6 +300,20 @@ assert(
     finalResult.release_binding?.proxy_configuration,
   "final evidence must bind deployment, runtime configuration, and proxy configuration identities"
 );
+if (manifest.candidate_configuration_identity) {
+  assert.strictEqual(
+    finalResult.release_binding.configuration.evidence_identity,
+    manifest.candidate_configuration_identity,
+    "live configuration identity differs from the candidate binding"
+  );
+}
+if (manifest.candidate_proxy_configuration_identity) {
+  assert.strictEqual(
+    finalResult.release_binding.proxy_configuration.evidence_identity,
+    manifest.candidate_proxy_configuration_identity,
+    "live proxy configuration identity differs from the candidate binding"
+  );
+}
 assert(
   Array.isArray(finalResult.named_scenarios) &&
     finalResult.named_scenarios.length === 25 &&