diff --git a/docs/state-hub-railiance01-cutover-phase1-2026-07-06.md b/docs/state-hub-railiance01-cutover-phase1-2026-07-06.md
index 327df8f..074e7aa 100644
--- a/docs/state-hub-railiance01-cutover-phase1-2026-07-06.md
+++ b/docs/state-hub-railiance01-cutover-phase1-2026-07-06.md
@@ -67,21 +67,19 @@ Post-Phase-2 restore must match coulombcore preflight counts exactly (see
 
 | Image | Status | Notes |
 | --- | --- | --- |
-| `forgejo.coulomb.social/coulomb/state-hub:main-f9f0091` | **broken** | Empty `/tmp/requirements.txt`; `ModuleNotFoundError: asyncpg` |
-| `gitea.coulomb.social/coulomb/state-hub:f2e042a` | **deployed** | Helm `--set image.*` override; matches coulombcore production pin |
+| `forgejo.coulomb.social/coulomb/state-hub:main-f9f0091` | **broken** | Empty venv (DinD `/tmp` + cache defect) |
+| `forgejo.coulomb.social/coulomb/state-hub:main-d1a4fcf` | **fixed** | CI green @ `d1a4fcf`; `asyncpg` 0.31.0, 246-byte requirements |
+| `gitea.coulomb.social/coulomb/state-hub:f2e042a` | **deployed** | Phase 1 Helm override; swap to Forgejo tag before Phase 2 |
 
-Helm values file targets Forgejo (`main-f9f0091`) for post-fix cutover. Rebuild
-Forgejo image before Phase 2 so production and CI share one registry.
-
-**Root cause:** DinD layer cache reused an empty `requirements.txt` layer from an
-earlier build; CI reported success at `f9f0091` but venv was empty. Fixes pushed
-to Forgejo `state-hub` @ `96b7306` (Dockerfile gates + `DEPS_LOCK_ID` cache bust);
-image workflow still failing on runner — rebuild tracked before Phase 2.
+**Root cause:** DinD legacy builder did not persist `/tmp` across RUN steps and
+reused stale COPY layers; CI reported success at `f9f0091` with empty venv.
+Fixed in `state-hub` @ `d1a4fcf` (single-RUN deps install under `/app`).
 
 ## Phase 2 prerequisites
 
 - [ ] Operator approval for freeze/final restore (Phase 0.6)
-- [ ] Fix and republish Forgejo `state-hub` image with working venv
+- [x] Fix and republish Forgejo `state-hub` image (`main-d1a4fcf`)
+- [ ] Helm upgrade railiance01 deploy to Forgejo image before Phase 2
 - [ ] Fresh `pg_dump` from coulombcore per CUST-WP-0011-T07 playbook
 
 ## References