diff --git a/services/hermes/chat-statefulset.yaml b/services/hermes/chat-statefulset.yaml
index cb3bc542f..cca28afee 100644
--- a/services/hermes/chat-statefulset.yaml
+++ b/services/hermes/chat-statefulset.yaml
@@ -28,7 +28,7 @@ spec:
         ai.bstein.dev/role: isolated-user-chat
         ai.bstein.dev/isolation: one Hermes process and PVC per Keycloak subject
         ai.bstein.dev/model-policy: uniform automatic policy with per-user overrides
-        ai.bstein.dev/config-rev: "20260811-image-plugin-enabled"
+        ai.bstein.dev/config-rev: "20260811-codex-broker"
         vault.hashicorp.com/agent-inject: "true"
         vault.hashicorp.com/role: hermes-chat
         vault.hashicorp.com/agent-inject-secret-anthropic-token: kv/data/atlas/hermes/agent-tokens
diff --git a/testing/tests/test_hermes_chat_quality.py b/testing/tests/test_hermes_chat_quality.py
index b5015941e..135b69b24 100644
--- a/testing/tests/test_hermes_chat_quality.py
+++ b/testing/tests/test_hermes_chat_quality.py
@@ -426,6 +426,9 @@ def test_chat_reasoning_uses_private_owner_codex_broker():
     ]
 
     statefulset = _documents(HERMES / "chat-statefulset.yaml")[0]
+    assert statefulset["spec"]["template"]["metadata"]["annotations"][
+        "ai.bstein.dev/config-rev"
+    ] == "20260811-codex-broker"
     hermes = next(
         item
         for item in statefulset["spec"]["template"]["spec"]["containers"]