diff --git a/docs/deploy/reuse-kubernetes.md b/docs/deploy/reuse-kubernetes.md
index fa58758..6bdc2f5 100644
--- a/docs/deploy/reuse-kubernetes.md
+++ b/docs/deploy/reuse-kubernetes.md
@@ -26,9 +26,14 @@ Mount a PVC at `/data` for persistence. Inject secrets via Kubernetes Secret
 
 - Liveness/readiness: `GET /health` on port `8000`
 
-## Public URL
+## Public URL and DNS
 
-`https://reuse.coulomb.social`
+| Item | Value |
+|---|---|
+| URL | `https://reuse.coulomb.social` |
+| DNS A record | `92.205.62.239` (operator confirmed 2026-06-15) |
+
+Verify propagation: `dig +short reuse.coulomb.social A`
 
 ## Client configuration
 
diff --git a/specs/FederationHubAPI.md b/specs/FederationHubAPI.md
index 0367206..ece5ed6 100644
--- a/specs/FederationHubAPI.md
+++ b/specs/FederationHubAPI.md
@@ -21,7 +21,7 @@ Companion deployment workplan: `railiance-apps` **RAILIANCE-WP-0007**.
 
 | Item | Value |
 |---|---|
-| Default production URL | `https://reuse.coulomb.social` |
+| Default production URL | `https://reuse.coulomb.social` (A → `92.205.62.239`) |
 | API prefix | `/v1` |
 | Read formats | JSON (default), YAML via `Accept: application/yaml` or `?format=yaml` |
 | Write content type | `application/json` |
diff --git a/workplans/REUSE-WP-0011-federation-hub-on-railiance01.md b/workplans/REUSE-WP-0011-federation-hub-on-railiance01.md
index f13f479..2b7c402 100644
--- a/workplans/REUSE-WP-0011-federation-hub-on-railiance01.md
+++ b/workplans/REUSE-WP-0011-federation-hub-on-railiance01.md
@@ -44,7 +44,7 @@ for discovery without cloning every repo.
 | Operations | Container image, deployment manifests, TLS ingress, documented runbook |
 | Dogfood | `reuse-surface` and at least one sibling repo registered via the hub |
 
-**Public URL:** `https://reuse.coulomb.social`
+**Public URL:** `https://reuse.coulomb.social` (DNS A → `92.205.62.239`)
 
 ## Design decisions (draft)
 
@@ -73,7 +73,7 @@ for discovery without cloning every repo.
 | Hub service code, API schema, CLI | `reuse-surface` | This workplan |
 | Container image build and push | `reuse-surface` + `railiance-forge` | OCI registry on `gitea.coulomb.social` |
 | Helm release on `railiance01` | `railiance-apps` | **RAILIANCE-WP-0007** (companion workplan) |
-| Ingress / TLS / DNS | `railiance-apps` + DNS owner | T05 — human confirmation for hostname |
+| Ingress / TLS / DNS | `railiance-apps` + DNS owner | DNS live → `92.205.62.239` |
 | Traefik / cert-manager primitives | `railiance-cluster` / `railiance-platform` | Reuse existing stack |
 | Secrets (hub token, TLS) | Operator | SOPS / sealed secrets; never commit plaintext |
 
@@ -200,14 +200,14 @@ state_hub_task_id: "7f26a70f-7b7d-413d-8162-931c6dffef6a"
 
 Deploy the hub as a governed release on `railiance01`:
 
-- Confirm DNS for `reuse.coulomb.social` (coulomb.social zone)
-- Traefik ingress + cert-manager TLS
+- DNS: `reuse.coulomb.social` A → `92.205.62.239` (confirmed)
+- Traefik ingress + cert-manager TLS (chart ready in RAILIANCE-WP-0007)
 - PVC for SQLite data
 - Inject `REUSE_SURFACE_TOKEN` via Secret `reuse-surface-env` (SOPS handoff)
 - Verify `GET /health` and `GET /v1/federated` from workstation and from cluster
 
-**Blocked on:** DNS decision, operator secret provisioning, and
-**RAILIANCE-WP-0007** Helm chart deploy (T04).
+**Blocked on:** OCI image build/push, `REUSE_SURFACE_TOKEN` secret, and
+**RAILIANCE-WP-0007** T04 deploy.
 
 ## Document Operations And Dogfood Registrations