diff --git a/stacks/cloudflared/modules/cloudflared/cloudflare.tf b/stacks/cloudflared/modules/cloudflared/cloudflare.tf
index e6edc402..bb4f8759 100644
--- a/stacks/cloudflared/modules/cloudflared/cloudflare.tf
+++ b/stacks/cloudflared/modules/cloudflared/cloudflare.tf
@@ -236,16 +236,9 @@ resource "cloudflare_record" "keyserver" {
 }
 
 # bridge.viktorbarzin.me (Cloudflare Pages, "мост" school site) moved to
-# stacks/valia-sites (ADR-0018) — all Valia-site records live there now.
-# Forget from this state WITHOUT destroying; valia-sites imports the live
-# record by id. Delete this block once both stacks have applied.
-removed {
-  from = cloudflare_record.bridge_pages
-
-  lifecycle {
-    destroy = false
-  }
-}
+# stacks/valia-sites (ADR-0018) — all Valia-site records live there now. The
+# state forget lives in the STACK ROOT (../..//removed-bridge.tf): removed{}
+# blocks are root-module-only.
 
 # Enable HTTP/3 (QUIC) for Cloudflare-proxied domains
 resource "cloudflare_zone_settings_override" "http3" {
diff --git a/stacks/cloudflared/removed-bridge.tf b/stacks/cloudflared/removed-bridge.tf
new file mode 100644
index 00000000..f4186c91
--- /dev/null
+++ b/stacks/cloudflared/removed-bridge.tf
@@ -0,0 +1,12 @@
+# bridge.viktorbarzin.me (Cloudflare Pages) moved to stacks/valia-sites
+# (ADR-0018), which has already imported the live record. Forget it from this
+# stack's state WITHOUT destroying. removed{} must sit in the root module —
+# a module-level attempt broke init (pipeline 461). Delete this file once the
+# apply has run.
+removed {
+  from = module.cloudflared.cloudflare_record.bridge_pages
+
+  lifecycle {
+    destroy = false
+  }
+}