diff --git a/tools/service-binds/bind-lane.py b/tools/service-binds/bind-lane.py
index 5684728..1c5ff4a 100755
--- a/tools/service-binds/bind-lane.py
+++ b/tools/service-binds/bind-lane.py
@@ -59,7 +59,7 @@ def contract(name, expected):
     ccr, errors, _ = load('credential_change', PLATFORM / 'scripts/credential-change.py').validate_ccr(path)
     if errors or ccr['status'] not in {'approved', 'applied', 'verified', 'active'}: raise Refused('ccr_status')
     approved = {r['reviewer'].removeprefix('User (').removesuffix(')') for r in ccr['review'].get('comments', [])
-                if r.get('decision') == 'approved' and r.get('source_ref')}
+                if r.get('decision') == 'approved' and (r.get('source_ref') or r.get('at'))}
     if not APPROVERS <= approved: raise Refused('ccr_approval')
     role = 'net-kingdom-' + name + '-bind-eso'
     kv = 'platform/workloads/net-kingdom/directory-binds/' + name