diff --git a/stacks/beads-server/main.tf b/stacks/beads-server/main.tf
index fb3a2e36..23b8a12f 100644
--- a/stacks/beads-server/main.tf
+++ b/stacks/beads-server/main.tf
@@ -3,10 +3,9 @@ variable "tls_secret_name" {
   sensitive = true
 }
 
-# Temporary default until GHA pipeline publishes the first 8-char SHA tag.
 variable "beadboard_image_tag" {
   type    = string
-  default = "latest"
+  default = "17a38e43"
 }
 
 resource "kubernetes_namespace" "beads" {
diff --git a/stacks/claude-agent-service/main.tf b/stacks/claude-agent-service/main.tf
index e07e1d75..a01fd54c 100644
--- a/stacks/claude-agent-service/main.tf
+++ b/stacks/claude-agent-service/main.tf
@@ -11,7 +11,7 @@ data "vault_kv_secret_v2" "viktor_secrets" {
 locals {
   namespace = "claude-agent"
   image     = "registry.viktorbarzin.me/claude-agent-service"
-  image_tag = "382d6b14"
+  image_tag = "0c24c9b6"
   labels = {
     app = "claude-agent-service"
   }