diff --git a/helm/coulomb-social-values.yaml b/helm/coulomb-social-values.yaml
index b16ed77..b28fe0c 100644
--- a/helm/coulomb-social-values.yaml
+++ b/helm/coulomb-social-values.yaml
@@ -3,8 +3,8 @@
 
 image:
   repository: forgejo.coulomb.social/coulomb/coulomb-social
-  tag: "b13ba9c5815e"
-  digest: "sha256:dbeaeda1a03622a91683f8db3c1f498e8bf43417cdb077ec740c56f0489baff6"
+  tag: "017b917e2158"
+  digest: "sha256:0e235abc33a1c5613c0e2c9a0f767c871d0fbed6695973ae17cfdcb2dedaaafa"
 
 # Public host: app.coulomb.social (parallel to Bubble on apex coulomb.social).
 # Apex cutover is deferred until data + self-registration are ready.
diff --git a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
index 75ade2f..b01a6d8 100644
--- a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
+++ b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
@@ -234,3 +234,21 @@ All75content files unchanged from fresh paired snapshot; owner access remains
 valid. Health/static200. Owning pin commit22c5695; sourceb13ba9c5815e.
 T04 remains founder naming/workflow review; edit and clipboard copy accepted.
 Receipt: coulomb-social/docs/release/reichelag-naming-2026-10-07.md.
+
+
+## Private Visual release — 2026-10-07
+
+Founder explicitly approves exact image-only rollout, decision
+3f959ed2-4163-4fa5-9f88-f80b2a3d1b89, ADMINISTER @
+realm:kubernetes/railiance01, activation=APPROVED. Source017b917e2158, published
+digest sha256:0e235abc33a1c5613c0e2c9a0f767c871d0fbed6695973ae17cfdcb2dedaaafa.
+Root make check129passed; private raster covers/body-image routing and bounded
+Visual copies tested, including actual Chromium writer/viewer/outsider behavior.
+Packaged UID10001/network-disabled smoke passes. Live-manifest comparison and
+server dry-run verified image only; current37JPEG signatures all match.
+
+Prepare fresh quiesced paired DB/content backup and verify isolated recovery
+before node Helm atomic/wait upgrade. Preserve issuer, mailbox, credentials,
+PVC, metadata/content and grants. Root receipt:
+coulomb-social/docs/release/private-visuals-2026-10-07.md. T04 and product T05/T09
+remain open for actual user Visual/workflow acceptance. No Bubble retirement.