diff --git a/task-templates/workflow/airouter-impl-narrow@1.yaml b/task-templates/workflow/airouter-impl-narrow@1.yaml
index 18e776f..547dc46 100644
--- a/task-templates/workflow/airouter-impl-narrow@1.yaml
+++ b/task-templates/workflow/airouter-impl-narrow@1.yaml
@@ -23,6 +23,8 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the failing test. Test file: ${artifacts.test_file}. Skeleton: ${artifacts.impl_skeleton}."
 escalation:
diff --git a/task-templates/workflow/airouter-impl-ready@1.yaml b/task-templates/workflow/airouter-impl-ready@1.yaml
index 3da7375..4d0f3a1 100644
--- a/task-templates/workflow/airouter-impl-ready@1.yaml
+++ b/task-templates/workflow/airouter-impl-ready@1.yaml
@@ -22,6 +22,8 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     labels: [airouter]
     prompt: |
diff --git a/task-templates/workflow/bug-verify-sonnet@1.yaml b/task-templates/workflow/bug-verify-sonnet@1.yaml
index fb34437..932959c 100644
--- a/task-templates/workflow/bug-verify-sonnet@1.yaml
+++ b/task-templates/workflow/bug-verify-sonnet@1.yaml
@@ -35,6 +35,8 @@ nodes:
     model: sonnet
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "bug-verify/${item.uuid}"
       CP_URL: "https://agents.oreillyit.nz/api"
     prompt: |
diff --git a/task-templates/workflow/bug-verify-sonnet@2.yaml b/task-templates/workflow/bug-verify-sonnet@2.yaml
index 9363c93..eaecf05 100644
--- a/task-templates/workflow/bug-verify-sonnet@2.yaml
+++ b/task-templates/workflow/bug-verify-sonnet@2.yaml
@@ -29,6 +29,8 @@ nodes:
     model: sonnet
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "bug-verify/${item.uuid}"
       CP_URL: "https://agents.oreillyit.nz/api"
     prompt: |
diff --git a/task-templates/workflow/direct-impl-sonnet@1.yaml b/task-templates/workflow/direct-impl-sonnet@1.yaml
index b4e6818..4d6774f 100644
--- a/task-templates/workflow/direct-impl-sonnet@1.yaml
+++ b/task-templates/workflow/direct-impl-sonnet@1.yaml
@@ -23,6 +23,8 @@ nodes:
     template: code-sonnet-tdd-repo
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: |
       Implement the scope described in this work item. The description lists
diff --git a/task-templates/workflow/fable-impl-ready@1.yaml b/task-templates/workflow/fable-impl-ready@1.yaml
index 5f956d6..f0b2791 100644
--- a/task-templates/workflow/fable-impl-ready@1.yaml
+++ b/task-templates/workflow/fable-impl-ready@1.yaml
@@ -18,5 +18,7 @@ nodes:
     template: code-fable-tdd-repo
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the task. ${metadata.automation.test_files}${metadata.automation.spec_ids}Task description: ${artifacts.item_title}. ${artifacts.item_body}"
diff --git a/task-templates/workflow/minimax-impl-ready@1.yaml b/task-templates/workflow/minimax-impl-ready@1.yaml
index 1125ee3..6e97e97 100644
--- a/task-templates/workflow/minimax-impl-ready@1.yaml
+++ b/task-templates/workflow/minimax-impl-ready@1.yaml
@@ -18,5 +18,7 @@ nodes:
     template: code-minimax-tdd-repo
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the task. ${metadata.automation.test_files}${metadata.automation.spec_ids}Task description: ${artifacts.item_title}. ${artifacts.item_body}"
diff --git a/task-templates/workflow/opus-impl-ready@1.yaml b/task-templates/workflow/opus-impl-ready@1.yaml
index d5c3ad2..7a8536f 100644
--- a/task-templates/workflow/opus-impl-ready@1.yaml
+++ b/task-templates/workflow/opus-impl-ready@1.yaml
@@ -22,5 +22,7 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the task. ${metadata.automation.test_files}${metadata.automation.spec_ids}Task description: ${artifacts.item_title}. ${artifacts.item_body}"
diff --git a/task-templates/workflow/plan-review-loop@1.yaml b/task-templates/workflow/plan-review-loop@1.yaml
index 9258c4e..785c0fe 100644
--- a/task-templates/workflow/plan-review-loop@1.yaml
+++ b/task-templates/workflow/plan-review-loop@1.yaml
@@ -22,6 +22,8 @@ nodes:
     model: claude-opus-5
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/review-spec-arch-airouter@1.yaml b/task-templates/workflow/review-spec-arch-airouter@1.yaml
index 5602133..b0824f2 100644
--- a/task-templates/workflow/review-spec-arch-airouter@1.yaml
+++ b/task-templates/workflow/review-spec-arch-airouter@1.yaml
@@ -21,6 +21,8 @@ nodes:
     labels: [airouter]
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/review-spec-arch-opus@1.yaml b/task-templates/workflow/review-spec-arch-opus@1.yaml
index 8c03431..3241345 100644
--- a/task-templates/workflow/review-spec-arch-opus@1.yaml
+++ b/task-templates/workflow/review-spec-arch-opus@1.yaml
@@ -21,6 +21,8 @@ nodes:
     template: best-practices-fable-low-repo
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/scope-decompose-sonnet@1.yaml b/task-templates/workflow/scope-decompose-sonnet@1.yaml
index cd020d8..4cdc986 100644
--- a/task-templates/workflow/scope-decompose-sonnet@1.yaml
+++ b/task-templates/workflow/scope-decompose-sonnet@1.yaml
@@ -26,6 +26,8 @@ nodes:
     model: sonnet
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
       CP_URL: "https://agents.oreillyit.nz/api"
       # AR-38: this stage's deliverable is work items POSTed to the CP, not a
diff --git a/task-templates/workflow/sonnet-impl-narrow@1.yaml b/task-templates/workflow/sonnet-impl-narrow@1.yaml
index e142951..36d2be9 100644
--- a/task-templates/workflow/sonnet-impl-narrow@1.yaml
+++ b/task-templates/workflow/sonnet-impl-narrow@1.yaml
@@ -22,6 +22,8 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the failing test. Test file: ${artifacts.test_file}. Skeleton: ${artifacts.impl_skeleton}."
 escalation:
diff --git a/task-templates/workflow/sonnet-impl-ready@1.yaml b/task-templates/workflow/sonnet-impl-ready@1.yaml
index 9b2d884..67eee4c 100644
--- a/task-templates/workflow/sonnet-impl-ready@1.yaml
+++ b/task-templates/workflow/sonnet-impl-ready@1.yaml
@@ -22,5 +22,7 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: "Implement the task. ${metadata.automation.test_files}${metadata.automation.spec_ids}Task description: ${artifacts.item_title}. ${artifacts.item_body}"
diff --git a/task-templates/workflow/spec-draft-airouter@2.yaml b/task-templates/workflow/spec-draft-airouter@2.yaml
index 3376c63..92fcc04 100644
--- a/task-templates/workflow/spec-draft-airouter@2.yaml
+++ b/task-templates/workflow/spec-draft-airouter@2.yaml
@@ -22,6 +22,8 @@ nodes:
     labels: [airouter]
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/spec-draft-opus@1.yaml b/task-templates/workflow/spec-draft-opus@1.yaml
index eca2178..56c29f6 100644
--- a/task-templates/workflow/spec-draft-opus@1.yaml
+++ b/task-templates/workflow/spec-draft-opus@1.yaml
@@ -22,6 +22,8 @@ nodes:
     template: spec-writing-fable-low-repo
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/spec-review-loop@1.yaml b/task-templates/workflow/spec-review-loop@1.yaml
index 888f30b..fe5764e 100644
--- a/task-templates/workflow/spec-review-loop@1.yaml
+++ b/task-templates/workflow/spec-review-loop@1.yaml
@@ -27,6 +27,8 @@ nodes:
     model: claude-opus-5
     runtime_env:
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "spec/${item.uuid}"
     prompt: |
       The agent-runtimes project repo is cloned at /workspace/project.
diff --git a/task-templates/workflow/test-write-minimax@2.yaml b/task-templates/workflow/test-write-minimax@2.yaml
index 8f0f223..8418ac8 100644
--- a/task-templates/workflow/test-write-minimax@2.yaml
+++ b/task-templates/workflow/test-write-minimax@2.yaml
@@ -22,4 +22,6 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
\ No newline at end of file
diff --git a/task-templates/workflow/test-write-review-loop@1.yaml b/task-templates/workflow/test-write-review-loop@1.yaml
index 2e9b3bb..221a019 100644
--- a/task-templates/workflow/test-write-review-loop@1.yaml
+++ b/task-templates/workflow/test-write-review-loop@1.yaml
@@ -26,6 +26,8 @@ nodes:
       # WF-COMP-15: stage agents share one per-item work branch so their work
       # accumulates across iterations.
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
   - id: review-sonnet
     kind: agent
diff --git a/task-templates/workflow/test-write@1.yaml b/task-templates/workflow/test-write@1.yaml
index d5dd2ea..d6d26d3 100644
--- a/task-templates/workflow/test-write@1.yaml
+++ b/task-templates/workflow/test-write@1.yaml
@@ -22,6 +22,8 @@ nodes:
       # see the same tree). Without AGENT_REPO_URL the agent-repo layer never
       # clones and the agent's output evaporates (E2E 2026-07-04).
       AGENT_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes-agents.git"
+      AGENT_UPSTREAM_REPO_URL: "git@gitea.oreillyit.nz-ai-enablement:skynet/agent-runtimes.git"
+      AGENT_UPSTREAM_BRANCH: "main"
       AGENT_BRANCH: "task/${item.uuid}"
     prompt: |
       You are writing pytest tests for the following task.