diff --git a/apps/registry/retention-script.yaml b/apps/registry/retention-script.yaml
index 993473c..4e9b09f 100644
--- a/apps/registry/retention-script.yaml
+++ b/apps/registry/retention-script.yaml
@@ -101,7 +101,7 @@ data:
           created='9999-12-31T23:59:59Z'
         rows.append((created, t, digest))
 
-  rows.sort(key=lambda x: x[0], reverse=True)
+      rows.sort(key=lambda x: x[0], reverse=True)
       KEEP_N=10   # keep last 10 SHA builds (current + 9 previous)
       keep_set=set(t for _, t, _ in rows[:KEEP_N])
       # preserve buildcache for performance