diff --git a/.github/workflows/proof-nudges.yml b/.github/workflows/proof-nudges.yml
index e050618c26..cff0786b3c 100644
--- a/.github/workflows/proof-nudges.yml
+++ b/.github/workflows/proof-nudges.yml
@@ -85,7 +85,7 @@ jobs:
           repositories: ${{ steps.target.outputs.target_repo_name }}
           permission-contents: read
           permission-issues: write
-          permission-pull-requests: read
+          permission-pull-requests: write
 
       - name: Create state token
         id: state-token
diff --git a/test/clawsweeper.test.ts b/test/clawsweeper.test.ts
index c37010c6c2..1dfe2aa5b1 100644
--- a/test/clawsweeper.test.ts
+++ b/test/clawsweeper.test.ts
@@ -16096,6 +16096,7 @@ test("proof nudge workflow is manual-first and scheduled behind repo vars", () =
   assert.match(job, /PROOF_NUDGES_LIMIT:/);
   assert.match(job, /PROOF_NUDGES_MIN_AGE_DAYS:/);
   assert.match(job, /PROOF_NUDGES_COOLDOWN_DAYS:/);
+  assert.match(job, /permission-pull-requests: write/);
   assert.match(
     job,
     /numeric_input in PROOF_NUDGES_LIMIT PROOF_NUDGES_MIN_AGE_DAYS PROOF_NUDGES_COOLDOWN_DAYS/,