diff --git a/sonar-project.properties b/sonar-project.properties
index c217cf80..d7d7f322 100644
--- a/sonar-project.properties
+++ b/sonar-project.properties
@@ -56,10 +56,12 @@ sonar.cpd.exclusions=\
 
 # Python
 #
-# Match the project's declared support: `requires-python = ">=3.11"` and Ruff
-# `target-version = "py311"`. Telling SonarCloud the code targets 3.11–3.12
-# (not 3.12 only) keeps its rules aligned with the lint contract (issue #54).
-sonar.python.version=3.11, 3.12
+# Match the project's declared support: `requires-python = ">=3.11,<3.15"` and
+# Ruff `target-version = "py311"`. Declaring the full 3.11–3.14 range keeps
+# SonarCloud's rules aligned with the interpreters CI actually qualifies
+# (#1134 qualified CPython 3.14) while the 3.11 floor still gates
+# newer-syntax suggestions on the lint contract (issue #54).
+sonar.python.version=3.11, 3.12, 3.13, 3.14
 
 # Rule/profile alignment
 #
diff --git a/tools/policy/historical_identity_records.json b/tools/policy/historical_identity_records.json
index a2e8e177..78969385 100644
--- a/tools/policy/historical_identity_records.json
+++ b/tools/policy/historical_identity_records.json
@@ -24,7 +24,7 @@
       "binding_class": "external-service-project-key",
       "rationale": "Retains the existing service-owned SonarCloud project designation without treating it as current RAES product identity.",
       "occurrences": 2,
-      "content_sha256": "8756c537bfe2e67ebd4dc963a21f6d915982ac50f7e569fb8a989a1bef947514"
+      "content_sha256": "89a7a7ca20f0f501fe5792fa0e186514f73d91699cf6b0efca744d754698eefd"
     }
   ],
   "records": [