diff --git a/scripts/audit-core-recovery-preflight.py b/scripts/audit-core-recovery-preflight.py
index 641893c..50f49e0 100755
--- a/scripts/audit-core-recovery-preflight.py
+++ b/scripts/audit-core-recovery-preflight.py
@@ -20,11 +20,12 @@ from pathlib import Path
 from typing import Any
 
 
-# audit-core release pinned by audit-core 1269a0e (2026-10-15, deploy/audit-core.yaml);
-# the previously reviewed ec15f63d image now remains only on the attest-chain CronJob.
+# audit-core release pinned by audit-core b365525 (2026-11-03, AUDIT-WP-0013-T07,
+# deploy/audit-core.yaml), built from 8185893. The attest-chain CronJob may run
+# an older image and is not checked here.
 EXPECTED_IMAGE = (
     "forgejo.coulomb.social/coulomb/audit-core@"
-    "sha256:b479801b0bc76df66a36a85376c45aaf399c6d82feade9ba81430b774c4a8271"
+    "sha256:304cfb83daa873e5790a2f262f6c4ccd56498b6e9e1a390368dcf0d407256300"
 )
 EXPECTED_DB_KEYS = {"username", "password", "host", "port", "dbname"}