diff --git a/deploy/railiance/apps/charts/state-hub/Chart.yaml b/deploy/railiance/apps/charts/state-hub/Chart.yaml
index 2d3fa5e..c194527 100644
--- a/deploy/railiance/apps/charts/state-hub/Chart.yaml
+++ b/deploy/railiance/apps/charts/state-hub/Chart.yaml
@@ -3,4 +3,4 @@ name: state-hub
 description: State Hub API service for private Railiance operation
 type: application
 version: 0.1.0
-appVersion: "main-697dd49"
+appVersion: "main-9851809"
diff --git a/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml b/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
index f931fe2..ade8c0a 100644
--- a/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
+++ b/deploy/railiance/apps/charts/state-hub/templates/deployment.yaml
@@ -14,6 +14,8 @@ spec:
       maxUnavailable: 0
   template:
     metadata:
+      annotations:
+        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
       labels: {{- include "statehub.labels" . | nindent 8 }}
     spec:
       securityContext: {{- toYaml .Values.podSecurityContext | nindent 8 }}
@@ -94,4 +96,4 @@ spec:
       {{- end }}
       {{- with .Values.tolerations }}
       tolerations: {{- toYaml . | nindent 8 }}
-      {{- end }}
\ No newline at end of file
+      {{- end }}
diff --git a/deploy/railiance/apps/helm/state-hub-values.yaml b/deploy/railiance/apps/helm/state-hub-values.yaml
index 5030a5b..10f19ea 100644
--- a/deploy/railiance/apps/helm/state-hub-values.yaml
+++ b/deploy/railiance/apps/helm/state-hub-values.yaml
@@ -13,8 +13,8 @@ ingress:
 
 config:
   sbomNexusUrl: "http://sbom-nexus.sbom-nexus.svc.cluster.local:8010"
-  # T04 starts fail-safe. Change only this value to `nexus` after parity checks.
-  sbomNexusReadMode: legacy
+  # Reversible T04 read cutover; set back to `legacy` to roll back.
+  sbomNexusReadMode: nexus
 
 resources:
   # The single 4-core node currently has less than 250m unallocated. Keep enough