diff --git a/deploy/railiance/apps/helm/state-hub-values.yaml b/deploy/railiance/apps/helm/state-hub-values.yaml
index 1342555..736b843 100644
--- a/deploy/railiance/apps/helm/state-hub-values.yaml
+++ b/deploy/railiance/apps/helm/state-hub-values.yaml
@@ -55,3 +55,8 @@ sweep:
 # pod through Kubernetes auth, never through this file or a Secret.
 forgeRead:
   enabled: true
+
+# RPF-WP-0035-T04: dedicated ESO signing key, API-only explicit reference.
+renamePreflight:
+  enabled: true
+  secretName: state-hub-rename-preflight