diff --git a/ansible/inventory/group_vars/all.yaml b/ansible/inventory/group_vars/all.yaml
index a161dd4..6c6d089 100644
--- a/ansible/inventory/group_vars/all.yaml
+++ b/ansible/inventory/group_vars/all.yaml
@@ -1,6 +1,6 @@
 # Ansible group vars — applied to all managed hosts.
 #
-# custodian_agent_pubkey: the SSH public key for the Custodian automation identity.
+# custodian_agent_pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/V9fe5MGKdhTBz9KwEvC1NE+HjdoCtQocpGxP6Pko9 custodian-agent"
 #
 # HOW TO SET THIS:
 #   1. Generate the keypair on the workstation (one-time):
@@ -17,4 +17,4 @@
 # The key below is a placeholder — replace by running `make custodian-keygen`.
 
 custodian_agent_user: tegwick
-custodian_agent_pubkey: ""
+custodian_agent_pubkey: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC/V9fe5MGKdhTBz9KwEvC1NE+HjdoCtQocpGxP6Pko9 custodian-agent"