diff --git a/oidc-deploy-roles.yaml b/oidc-deploy-roles.yaml
index 7ab639f..5e44d24 100644
--- a/oidc-deploy-roles.yaml
+++ b/oidc-deploy-roles.yaml
@@ -1247,7 +1247,12 @@ Resources:
               StringEquals:
                 token.actions.githubusercontent.com:aud: sts.amazonaws.com
               StringLike:
-                token.actions.githubusercontent.com:sub: !Sub repo:${GitHubOrg}/seahaven-account-baseline:ref:refs/heads/main
+                # Transition pair for the seahaven-account-baseline ->
+                # seahaven-org-baseline repo rename (2026-07-14). The old sub is
+                # removed once a post-rename deploy is verified green.
+                token.actions.githubusercontent.com:sub:
+                  - !Sub repo:${GitHubOrg}/seahaven-account-baseline:ref:refs/heads/main
+                  - !Sub repo:${GitHubOrg}/seahaven-org-baseline:ref:refs/heads/main
       Policies:
         - PolicyName: cdk-deploy
           PolicyDocument: