diff --git a/backend/src/auth/runtime-projection.ts b/backend/src/auth/runtime-projection.ts
index 5f83af29..24e4e645 100644
--- a/backend/src/auth/runtime-projection.ts
+++ b/backend/src/auth/runtime-projection.ts
@@ -581,7 +581,7 @@ function load(root: string): LoadedAuthConfig {
       );
       return {
         value: selectedGeneration.value,
-        revision: `sha256:${selected.generation}`,
+        revision: selected.generation,
         sourcePath: join(generationsPath, selected.generation, "auth.yaml"),
         runtimeProjection: snapshot(
           selected.generation,
diff --git a/backend/test/auth-runtime-projection.test.ts b/backend/test/auth-runtime-projection.test.ts
index 06809297..affa4ef6 100644
--- a/backend/test/auth-runtime-projection.test.ts
+++ b/backend/test/auth-runtime-projection.test.ts
@@ -283,7 +283,7 @@ linuxTest("loads ready projection as one immutable auth and local-users snapshot
   const generation = writeReadyProjection(root, fixture);
   const loaded = createProjectedAuthenticationConfigProvider(root).current();
 
-  expect(loaded.revision).toBe(`sha256:${generation}`);
+  expect(loaded.revision).toBe(generation);
   expect(loaded.sourcePath).toBe(
     join(root, "generations", generation, "auth.yaml"),
   );