diff --git a/tests/bluesky-pds/recipe_meta.py b/tests/bluesky-pds/recipe_meta.py
index 7d724ac..5fe3766 100644
--- a/tests/bluesky-pds/recipe_meta.py
+++ b/tests/bluesky-pds/recipe_meta.py
@@ -20,3 +20,7 @@ EXPECTED_NA = {
     "pds:0.4, which upstream republished with incompatible main builds (index.js removed) — "
     "re-enable via UPGRADE_BASE_VERSION once a fixed version is published post-merge",
 }
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/cryptpad/recipe_meta.py b/tests/cryptpad/recipe_meta.py
index e345b78..c02cfb7 100644
--- a/tests/cryptpad/recipe_meta.py
+++ b/tests/cryptpad/recipe_meta.py
@@ -13,3 +13,8 @@ def EXTRA_ENV(ctx):
     (covered by the wildcard cert, so no cert work)."""
     label, _, rest = ctx.domain.partition(".")
     return {"SANDBOX_DOMAIN": f"{label}-sb.{rest}"}
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/custom-html-tiny/recipe_meta.py b/tests/custom-html-tiny/recipe_meta.py
index 0c61bd8..d1bfb9c 100644
--- a/tests/custom-html-tiny/recipe_meta.py
+++ b/tests/custom-html-tiny/recipe_meta.py
@@ -14,3 +14,7 @@ EXPECTED_NA = {
     "backup_restore": "stateless static file server: serves an ephemeral content volume seeded at "
     "deploy, with no persistent/user data to back up or restore (no backupbot.backup label)",
 }
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/discourse/recipe_meta.py b/tests/discourse/recipe_meta.py
index 3d3903b..0334ad4 100644
--- a/tests/discourse/recipe_meta.py
+++ b/tests/discourse/recipe_meta.py
@@ -70,3 +70,8 @@ def BACKUP_VERIFY(ctx):
     except Exception:  # noqa: BLE001 — exec fails if the db is mid-cycle: treat as not-yet-captured
         return False
     return out.isdigit() and int(out) > 0
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/drone/recipe_meta.py b/tests/drone/recipe_meta.py
index 684d0e3..2c6a3e1 100644
--- a/tests/drone/recipe_meta.py
+++ b/tests/drone/recipe_meta.py
@@ -14,3 +14,7 @@ HTTP_TIMEOUT = 600
 # install_steps.sh (which wires GITEA_CLIENT_ID + GITEA_DOMAIN + client_secret into drone's env
 # and compose), then deploys drone once with SCM already configured.
 DEPS = ["gitea"]
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/ghost/recipe_meta.py b/tests/ghost/recipe_meta.py
index 8296c4a..e4d2935 100644
--- a/tests/ghost/recipe_meta.py
+++ b/tests/ghost/recipe_meta.py
@@ -73,3 +73,8 @@ def BACKUP_VERIFY(ctx):
     except Exception:  # noqa: BLE001 — exec fails if the db is mid-cycle: treat as not-yet-captured
         return False
     return out.isdigit() and int(out) > 0
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/gitea/recipe_meta.py b/tests/gitea/recipe_meta.py
index 422972e..13b6ed5 100644
--- a/tests/gitea/recipe_meta.py
+++ b/tests/gitea/recipe_meta.py
@@ -137,3 +137,8 @@ def EXTRA_ENV(ctx):
         # Tell abra's secret generator which version to use for lfs_jwt_secret.
         env["SECRET_LFS_JWT_SECRET_VERSION"] = "v1"
     return env
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/hedgedoc/recipe_meta.py b/tests/hedgedoc/recipe_meta.py
index bc7a5e0..bf6f088 100644
--- a/tests/hedgedoc/recipe_meta.py
+++ b/tests/hedgedoc/recipe_meta.py
@@ -4,3 +4,7 @@ HEALTH_PATH = "/"
 HEALTH_OK = (200, 302)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/immich/recipe_meta.py b/tests/immich/recipe_meta.py
index 1887695..d794f18 100644
--- a/tests/immich/recipe_meta.py
+++ b/tests/immich/recipe_meta.py
@@ -10,3 +10,7 @@ HEALTH_OK = (200, 301, 302)
 # immich-server boots the API + web + (first-run) machine-learning model fetch; allow a wide window.
 DEPLOY_TIMEOUT = 1500
 HTTP_TIMEOUT = 600
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/keycloak/recipe_meta.py b/tests/keycloak/recipe_meta.py
index 80058c1..b9eefa7 100644
--- a/tests/keycloak/recipe_meta.py
+++ b/tests/keycloak/recipe_meta.py
@@ -6,3 +6,7 @@ DEPLOY_TIMEOUT = (
     900  # JVM + DB migration are slow on a 2-vCPU VM; observed 502 fallback up to ~10min
 )
 HTTP_TIMEOUT = 900
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/lasuite-docs/recipe_meta.py b/tests/lasuite-docs/recipe_meta.py
index b91112d..acc29e6 100644
--- a/tests/lasuite-docs/recipe_meta.py
+++ b/tests/lasuite-docs/recipe_meta.py
@@ -21,3 +21,8 @@ def EXTRA_ENV(ctx):
     # minio, postgres18, redis, docspec, y-provider). Cold pulls exceed 300s -> "deploy timed out 🟠".
     # Bump it so the harness deploy waits long enough; verified the stack converges 9/9 once pulled.
     return {"TIMEOUT": "900"}
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/lasuite-drive/recipe_meta.py b/tests/lasuite-drive/recipe_meta.py
index 4dea90c..f0cd877 100644
--- a/tests/lasuite-drive/recipe_meta.py
+++ b/tests/lasuite-drive/recipe_meta.py
@@ -60,3 +60,8 @@ def EXTRA_ENV(ctx):
         # convergence; kept under DEPLOY_TIMEOUT (1800) so Python never kills abra mid-wait.
         "TIMEOUT": "1500",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/lasuite-meet/recipe_meta.py b/tests/lasuite-meet/recipe_meta.py
index 32998f3..ba14585 100644
--- a/tests/lasuite-meet/recipe_meta.py
+++ b/tests/lasuite-meet/recipe_meta.py
@@ -35,3 +35,8 @@ def EXTRA_ENV(ctx):
         # a cold image cache; bump it (kept under DEPLOY_TIMEOUT so Python never kills abra mid-wait).
         "TIMEOUT": "1000",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/mailu/recipe_meta.py b/tests/mailu/recipe_meta.py
index 1683a90..1baa9d0 100644
--- a/tests/mailu/recipe_meta.py
+++ b/tests/mailu/recipe_meta.py
@@ -30,3 +30,8 @@ def EXTRA_ENV(ctx):
         "SITENAME": "ccci-mail",
         "POSTMASTER": "admin",
     }
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/matrix-synapse/recipe_meta.py b/tests/matrix-synapse/recipe_meta.py
index 54a0557..a540f67 100644
--- a/tests/matrix-synapse/recipe_meta.py
+++ b/tests/matrix-synapse/recipe_meta.py
@@ -14,3 +14,7 @@ HTTP_TIMEOUT = 600
 # register endpoint via `exec_in_app` (curl localhost from inside the container) — that path
 # bypasses the public router and does NOT require ENABLE_REGISTRATION to be true.
 EXTRA_ENV = {"TIMEOUT": "900"}
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/mattermost-lts/recipe_meta.py b/tests/mattermost-lts/recipe_meta.py
index 0e98165..b9143ad 100644
--- a/tests/mattermost-lts/recipe_meta.py
+++ b/tests/mattermost-lts/recipe_meta.py
@@ -46,3 +46,8 @@ def SCREENSHOT(page, ctx):
     with contextlib.suppress(Exception):
         page.click("text=View in Browser", timeout=3_000)
         screenshot_mod.settle(page, 8_000)
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/mumble/recipe_meta.py b/tests/mumble/recipe_meta.py
index d453e4c..ea8d74f 100644
--- a/tests/mumble/recipe_meta.py
+++ b/tests/mumble/recipe_meta.py
@@ -68,3 +68,8 @@ def READY_PROBE(ctx):
     if "compose.host-ports.yml" in cf:
         return [{"tcp_host": "127.0.0.1", "tcp_port": 64738, "stable": 3}]
     return []
+
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/n8n/recipe_meta.py b/tests/n8n/recipe_meta.py
index 8547c43..4beaf00 100644
--- a/tests/n8n/recipe_meta.py
+++ b/tests/n8n/recipe_meta.py
@@ -5,3 +5,7 @@ HEALTH_PATH = "/healthz"
 HEALTH_OK = (200,)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/plausible/recipe_meta.py b/tests/plausible/recipe_meta.py
index 9921646..cf96f80 100644
--- a/tests/plausible/recipe_meta.py
+++ b/tests/plausible/recipe_meta.py
@@ -34,3 +34,7 @@ EXTRA_ENV = {
 # ABOVE the newest published tag — the documented case where the correct base is [-1], the
 # newest published version. Pin it.
 UPGRADE_BASE_VERSION = "3.0.1+v2.0.0"
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True
diff --git a/tests/uptime-kuma/recipe_meta.py b/tests/uptime-kuma/recipe_meta.py
index 006ee0b..da6f060 100644
--- a/tests/uptime-kuma/recipe_meta.py
+++ b/tests/uptime-kuma/recipe_meta.py
@@ -5,3 +5,7 @@ HEALTH_PATH = "/"
 HEALTH_OK = (200, 302)
 DEPLOY_TIMEOUT = 600
 HTTP_TIMEOUT = 300
+
+# canon §2.B: enroll as a DATA-WARM canonical (all recipes enrolled — operator 2026-06-17).
+# The weekly sweep promotes this recipe's canonical to its latest green RELEASE TAG.
+WARM_CANONICAL = True