diff --git a/charts/coulomb-social/values.yaml b/charts/coulomb-social/values.yaml
index f8e3c20..034e435 100644
--- a/charts/coulomb-social/values.yaml
+++ b/charts/coulomb-social/values.yaml
@@ -38,7 +38,7 @@ env:
   USER_ENGINE_APPLICATION_ID: coulomb-social
   USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
   # USER_ENGINE_BASE_URL set via secret or here when stable
-  USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io
+  USER_ENGINE_BASE_URL: https://users.coulomb.social
   NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register
 
 probes:
diff --git a/helm/coulomb-social-values.yaml b/helm/coulomb-social-values.yaml
index 2cb0846..dc345ce 100644
--- a/helm/coulomb-social-values.yaml
+++ b/helm/coulomb-social-values.yaml
@@ -19,7 +19,7 @@ env:
   OIDC_CLIENT_ID: coulomb-social
   OIDC_REDIRECT_URI: https://app.coulomb.social/auth/callback/
   OIDC_SCOPES: "openid profile email groups"
-  USER_ENGINE_BASE_URL: https://users.92-205-62-239.nip.io
+  USER_ENGINE_BASE_URL: https://users.coulomb.social
   USER_ENGINE_APPLICATION_ID: coulomb-social
   USER_ENGINE_EXPECTED_AUDIENCE: user-engine-portal
   NETKINGDOM_REGISTRATION_URL: https://users.92-205-62-239.nip.io/register
diff --git a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
index 8191787..3d19cd5 100644
--- a/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
+++ b/workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
@@ -128,3 +128,20 @@ another service. No password was requested/read/exported or reset. Authelia's
 current notifier is filesystem rather than SMTP: do not promise emailed recovery
 or expose reset tokens from notification files. Any credential reset must use
 the owning attended recovery/setup lane under a separate exact approved change.
+
+## Personal login 500 correction — 2026-10-06
+
+User confirmed fresh password-reset email receipt, then reported HTTP500 after
+authentication. In-pod credential-safe read-only probes with empty claims show
+old USER_ENGINE_BASE_URL redirects302 to users.coulomb.social/api/v1/me; canonical
+endpoint responds400 to empty claims using the existing service credential. No
+identity was created. The application's httpx client does not follow redirects
+and raise_for_status rejects302 before establishing its local session.
+
+Correct USER_ENGINE_BASE_URL in chart defaults and production overrides to
+https://users.coulomb.social. Preserve immutable image, Secret references,
+identity issuer/subject/tenant, PVC and access rules. This completes the already
+approved personal app deployment; founder go/interruption approval is recorded
+in decision8bbce691-a787-4140-9cd4-df06e8635a27. Use node-side Helm atomic upgrade,
+server dry-run and exact manifest diff; rollback revision10 if necessary. T04
+remains waiting for successful interactive personal workspace acceptance.