diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 7ffb8e3..fe5f4a0 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -185,6 +185,14 @@ jobs:
       target-repo: ${{ github.repository }}
       server-url: ${{ github.server_url }}
       run-id: ${{ github.run_id }}
+      # template-hash is the sha256 of this file's SOURCE on
+      # genlayer-e2e (pre-injection); sync-templates.sh fills it in
+      # for each consumer at sync time. The acknowledge job compares
+      # it to the current source hash and fails fast when the consumer
+      # is behind on syncs. The empty literal here is what the source
+      # ships with — it stays empty in the genlayer-e2e repo itself
+      # (skipped at the check step on the source-side path).
+      template-hash: 'c930ed3f3db92eedf5b2bf944dbe882b5b8c962210e44ab33e8f397bb8bf64d1' # SYNC_INJECT(template_hash)
     secrets: inherit
 
   # ===========================================================================
@@ -225,6 +233,12 @@ jobs:
       # and its output is empty — the planner's empty default then
       # disables layering (today's pre-Slice-A behaviour).
       pre-build-cache: ${{ needs.acknowledge.outputs.pre-build-cache || '' }}
+      # Pre-parsed Depends-On TSV (one `<repo>\t<ref>` line per entry).
+      # Produced by acknowledge's validate-depends-on step. Empty on
+      # workflow_dispatch (no PR body to parse) — plan's resolve-matrix /
+      # resolve-components treat empty as "no overrides", same as the
+      # legacy path that used to do its own parse.
+      depends-on-tsv: ${{ needs.acknowledge.outputs.depends-on-tsv || '' }}
 
   # ===========================================================================
   # build — full stack up + pack to cache. Synthetic PR context on the