diff --git a/scripts/src/agentrun.test.ts b/scripts/src/agentrun.test.ts
index caa6859c..c23f5f65 100644
--- a/scripts/src/agentrun.test.ts
+++ b/scripts/src/agentrun.test.ts
@@ -1651,20 +1651,20 @@ describe("AgentRun YAML tool credential binding", () => {
         {
           tool: "github",
           purpose: "github-pr",
-          secretRef: { name: "agentrun-v01-tool-github-pr", keys: ["GH_TOKEN"] },
+          secretRef: { name: "agentrun-release-tool-github-pr", keys: ["GH_TOKEN"] },
           projection: { kind: "env", envName: "GH_TOKEN", secretKey: "GH_TOKEN" },
         },
         {
           tool: "unidesk-ssh",
           purpose: "ssh-passthrough",
-          secretRef: { name: "agentrun-v01-tool-unidesk-ssh", keys: ["UNIDESK_SSH_CLIENT_TOKEN"] },
+          secretRef: { name: "agentrun-release-tool-unidesk-ssh", keys: ["UNIDESK_SSH_CLIENT_TOKEN"] },
           projection: { kind: "env", envName: "UNIDESK_SSH_CLIENT_TOKEN", secretKey: "UNIDESK_SSH_CLIENT_TOKEN" },
         },
         {
           tool: "github",
           purpose: "github-ssh",
           secretRef: {
-            name: "agentrun-v01-tool-github-ssh",
+            name: "agentrun-release-tool-github-ssh",
             keys: credentialMode === "conflict" ? ["id_ed25519", "known_hosts", "config"] : ["id_ed25519", "known_hosts"],
           },
           projection: { kind: "volume", mountPath: "/home/agentrun/.ssh" },
@@ -1701,7 +1701,7 @@ describe("AgentRun YAML tool credential binding", () => {
           allowCredentialEcho: false,
           providerCredentials: [{
             profile: "codex",
-            secretRef: { name: "agentrun-v01-provider-codex", keys: ["auth.json", "config.toml"] },
+            secretRef: { name: "agentrun-release-provider-codex", keys: ["auth.json", "config.toml"] },
           }],
           toolCredentials: renderedToolCredentials(),
         },