diff --git a/helm/reuse-surface-values.yaml b/helm/reuse-surface-values.yaml
index 73253a1..ce5c0b2 100644
--- a/helm/reuse-surface-values.yaml
+++ b/helm/reuse-surface-values.yaml
@@ -4,7 +4,13 @@
 # See docs/reuse-surface-on-railiance01.md#runtime-secrets
 
 image:
-  tag: "e3ae22e"
+  # Was "e3ae22e" — a Gitea-era tag that does NOT exist in the Forgejo registry
+  # (tags/list: latest, main-b035664, main-bca7165, main-f9d957a). The pinned
+  # value could not be pulled, so any restart risked ImagePullBackOff.
+  # main-b035664 is a CI build of reuse-surface main and includes the compose
+  # hardening that keeps one malformed member index from 500-ing the federated
+  # endpoint. See REUSE-WP-0020-T05.
+  tag: "main-b035664"
 
 landing:
   enabled: true