diff --git a/apps/fc-devicemgmt/deployment-web.yaml b/apps/fc-devicemgmt/deployment-web.yaml
index 75b0dda..9f49186 100644
--- a/apps/fc-devicemgmt/deployment-web.yaml
+++ b/apps/fc-devicemgmt/deployment-web.yaml
@@ -10,8 +10,8 @@
 # Phase 1 production uses a Longhorn RWO PVC at /data/devicemgmt.db. The
 # 1Password runtime item stays mounted through env for future MySQL/API-key
 # cutover, but MySQL is not required for this first product-host rollout.
-# Image v20260613-enrollment-sqlitefix is built from FlowerCore.DeviceManagement master
-# 6443793, carrying the ADR-191 P3 certificate enrollment plane plus SQLite live-list fix.
+# Image v20260613-patch-ledger is built from FlowerCore.DeviceManagement master
+# f42790e, carrying the ADR-182 patch ledger and unified device change timeline.
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
@@ -83,7 +83,7 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: web
-          image: localhost/fc-devicemgmt-web:v20260613-enrollment-sqlitefix
+          image: localhost/fc-devicemgmt-web:v20260613-patch-ledger
           imagePullPolicy: Never
           ports:
             - name: http