diff --git a/platform/pm-agent/configmap.yaml b/platform/pm-agent/configmap.yaml
index 96d61b9..d8c59cd 100644
--- a/platform/pm-agent/configmap.yaml
+++ b/platform/pm-agent/configmap.yaml
@@ -67,7 +67,7 @@ data:
   # adds the CLI failure envelope to triage errors and the PM_DECISION_MAX_TURNS knob
   # (decisions/2026-10-31-pm-agent-digest-99.md).
   # renovate-digest: image=gitea.home.keithjackson.dev/home-network/agent-runner tag=main
-  PM_WORKER_IMAGE: "gitea.home.keithjackson.dev/home-network/agent-runner@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2"
+  PM_WORKER_IMAGE: "gitea.home.keithjackson.dev/home-network/agent-runner@sha256:89ce7eead20ccadf95c2bc6a1ffd497c8c5e2bb93245c9082979742bda4c46a1"
 
   # --- the model -------------------------------------------------------------
   # The PM only reads a thread and answers with one JSON object, so it holds no tools and
diff --git a/platform/pm-agent/deployment.yaml b/platform/pm-agent/deployment.yaml
index 6f78264..0fd8e6d 100644
--- a/platform/pm-agent/deployment.yaml
+++ b/platform/pm-agent/deployment.yaml
@@ -78,7 +78,7 @@ spec:
           # the registry's manifest endpoint on 2026-10-30 and pinned by hand once so the
           # dispatcher does not wait on Renovate's first run; every later bump is Renovate's.
           # renovate-digest: image=gitea.home.keithjackson.dev/home-network/agent-runner tag=main
-          image: gitea.home.keithjackson.dev/home-network/agent-runner@sha256:14a42ba8281ecd98005f5d99ecda4fb729104c783b01584097c32e104ced1bb2
+          image: gitea.home.keithjackson.dev/home-network/agent-runner@sha256:89ce7eead20ccadf95c2bc6a1ffd497c8c5e2bb93245c9082979742bda4c46a1
           imagePullPolicy: IfNotPresent
           command:
             - /usr/local/bin/pm-dispatch