diff --git a/server/src/services/finalized-workspace-recovery-migration.test.ts b/server/src/services/finalized-workspace-recovery-migration.test.ts
index b799183aa70..3b9950ccf29 100644
--- a/server/src/services/finalized-workspace-recovery-migration.test.ts
+++ b/server/src/services/finalized-workspace-recovery-migration.test.ts
@@ -162,6 +162,23 @@ describe.skipIf(!support.supported)("finalized workspace recovery preservation",
     await migrateRemoteWorkspace({ db, ...f, apply: true, writersStopped: true });
     expect(await verifiedWorkspaceRepairReceipt(db, (await preserved(f)).run)).toBe(operationId);
   });
+  it("does not treat one old copyback as repair of several declared allocations", async () => {
+    const f = await fixture(true), otherLeaseId = randomUUID();
+    const [lease] = await db.select().from(environmentLeases).where(eq(environmentLeases.id, f.reference.leaseId));
+    await db.insert(environmentLeases).values({ ...lease, id: otherLeaseId, providerLeaseId: randomUUID() });
+    await db.update(issueRecoveryActions).set({ evidence: { ...f.action.evidence,
+      systemRecovery: { ...createSystemRecovery(f.runId), state: "complete" },
+      workspaceRecovery: { ...(f.action.evidence.workspaceRecovery as object), status: "recovered" },
+      historicalWorkspaceSource: { schema: "paperclip.historical-workspace-source.v1", runId: f.runId,
+        leaseIds: [f.reference.leaseId, otherLeaseId] },
+    } }).where(eq(issueRecoveryActions.id, f.action.id));
+    await db.insert(workspaceOperations).values({ companyId: f.companyId, issueId: f.issueId,
+      heartbeatRunId: f.runId, phase: "workspace_recovery", status: "succeeded", metadata: {
+        recoveryActionId: f.action.id, leaseId: f.reference.leaseId, providerLeaseId: f.reference.providerLeaseId,
+        descriptorSha256: f.reference.descriptorSha256, finalHostSha256: f.reference.finalHostSha256 } });
+    await migrateRemoteWorkspace({ db, ...f, apply: true, writersStopped: true });
+    expect(await verifiedWorkspaceRepairReceipt(db, (await preserved(f)).run)).toBeNull();
+  });
   it("requires the exact receipt and leaves ordinary finalized references alone", async () => {
     const f = await fixture(true);
     expect(await readMigratedLegacyWorkspaceSource(db, { ...f, reference: f.reference })).toBeNull();
diff --git a/server/src/services/workspace-recovery-receipt.ts b/server/src/services/workspace-recovery-receipt.ts
index 01e8ff8861d..5568a17ae96 100644
--- a/server/src/services/workspace-recovery-receipt.ts
+++ b/server/src/services/workspace-recovery-receipt.ts
@@ -108,7 +108,7 @@ export async function verifiedWorkspaceRepairReceipt(db: Db, run: Pick<typeof he
       if (receiptId) return receiptId;
       // A completed legacy copyback is still a valid receipt after its host
       // files move. Migration must not erase that independent recovery proof.
-      if (reference?.state !== "finalized") return null;
+      if (reference?.state !== "finalized" || allocations.length !== 1 || allocations[0].leaseId !== reference.leaseId) return null;
     }
   }
   if (typeof issueId !== "string" || (!remote && (!reference || reference.state !== "finalized" || !reference.finalHostSha256))) return null;