diff --git a/deploy/README.md b/deploy/README.md
index adf2061..2e169d0 100644
--- a/deploy/README.md
+++ b/deploy/README.md
@@ -164,11 +164,12 @@ The installed `informed-decision-admin` supports local custody operations only:
 
 ```sh
 informed-decision-admin inspect --db /data/private/review.sqlite
-informed-decision-admin backup --db /data/private/review.sqlite --output /backup/private/review.sqlite
+informed-decision-admin backup --db /data/private/review.sqlite --output /data/private/review-YYYYMMDD.sqlite
 ```
 
 The backup parent must already be owned/private 0700; the destination must not
-exist. Backup uses SQLite's consistent backup API while the service may be live.
+exist. The deployment mounts no `/backup` volume; `/data/private` qualifies but
+shares the PVC, so copy the file off-cluster (`kubectl cp`) for an independent copy. Backup uses SQLite's consistent backup API while the service may be live.
 Do not copy a running SQLite file while ignoring WAL. Inspection prints counts
 and schema version, not memo content or credentials. These are privileged
 operator custody commands, not browser endpoints. An independent backup copy,
diff --git a/deploy/sitting-admission.json b/deploy/sitting-admission.json
index c168ab7..d72b9a5 100644
--- a/deploy/sitting-admission.json
+++ b/deploy/sitting-admission.json
@@ -1,5 +1,5 @@
 {
-  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
+  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
   "policy": {
     "origin": "http://flex-auth-informed-decision-sitting.flex-auth.svc.cluster.local:8080",
     "package": "informed-decision.compact-sitting",
diff --git a/deploy/t03-admission.json b/deploy/t03-admission.json
index 0ae98f0..29a22ae 100644
--- a/deploy/t03-admission.json
+++ b/deploy/t03-admission.json
@@ -1,5 +1,5 @@
 {
-  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
+  "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
   "policy": {
     "origin": "http://flex-auth-informed-decision-t03.flex-auth.svc.cluster.local:8080",
     "package": "informed-decision.t03-review",
diff --git a/docs/evidence/2026-09-21-decision-overview-image.json b/docs/evidence/2026-09-21-decision-overview-image.json
index 3d773a9..b92a7e2 100644
--- a/docs/evidence/2026-09-21-decision-overview-image.json
+++ b/docs/evidence/2026-09-21-decision-overview-image.json
@@ -6,6 +6,25 @@
   "image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:971e88e3c7b68b370f4d7ef14824cc0e19c854b5aeb372e7ec7edbcf2c847b31",
   "previous_live_image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:ef6fdd61209863654be3adba070661645a2714e86cb4b7f4e847540291b55f07",
   "published": true,
-  "rolled_out": false,
-  "remaining": "Operator pre-rollout inspect/backup and rollout; agent production access was not granted."
+  "rolled_out": true,
+  "remaining": "Human sign-in view of the overview not yet observed by the agent.",
+  "rollout": {
+    "by": "operator",
+    "strategy": "Recreate via kubectl set image",
+    "pre_rollout_inspect": {
+      "schema_version": 2,
+      "outbox": {
+        "delivered": 50
+      },
+      "submissions": {
+        "confirmed": 7
+      }
+    },
+    "pre_rollout_backup": "/data/private/review-20260921-pre-overview.sqlite (same PVC; consistent_snapshot true)",
+    "post_rollout": {
+      "ready_replicas": 1,
+      "healthz": "ok",
+      "readyz": "ready"
+    }
+  }
 }