diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4f9a949..f3e2e55 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -167,14 +167,14 @@ jobs:
         run: relay interop --protocol LIN /tmp/go-lin
 
   # ── go-FuSa full safety lifecycle (spec §20.1.2) ──────────────────────────
-  # Pinned to v0.47.1. §20 makes the full lifecycle normative: every change must
+  # Pinned to v0.48.0. §20 makes the full lifecycle normative: every change must
   # pass check (ERROR gate), 100% requirement traceability, cybersecurity
   # analysis, dependency vulnerability scan, and tool qualification. The
   # remaining steps generate evidence artifacts (verify/fmea/release) and are
   # non-gating. To upgrade: install the new version locally, run the gating
   # commands, fix all findings, then bump the @version pin below.
   gofusa:
-    name: go-FuSa full lifecycle (v0.47.1)
+    name: go-FuSa full lifecycle (v0.48.0)
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
@@ -184,7 +184,7 @@ jobs:
           go-version: "1.25"
 
       - name: Install go-FuSa
-        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.47.1
+        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.48.0
 
       - name: gofusa check (gate on ERROR findings)
         run: gofusa check ./...
@@ -282,7 +282,7 @@ jobs:
           go-version: "1.25"
 
       - name: Install go-FuSa
-        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.47.1
+        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.48.0
 
       - name: Generate evidence
         run: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index db80654..a380f8b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -26,7 +26,7 @@ jobs:
           go-version: "1.25"
 
       - name: Install go-FuSa
-        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.47.1
+        run: go install github.com/SoundMatt/go-FuSa/cmd/gofusa@v0.48.0
 
       # -strict enforces the x-FuSa spec §1.6.2 content-quality gate: as of
       # go-FuSa v0.47.0 (go-FuSa#60) dFMEA entries vary failureMode/effect/