diff --git a/vm/ai-env/ai.env b/vm/ai-env/ai.env
index e471a74..dc483d4 100644
--- a/vm/ai-env/ai.env
+++ b/vm/ai-env/ai.env
@@ -14,7 +14,9 @@ HARNESS_URL=http://10.20.0.11:8080
 MIMIR_URL=http://10.20.0.10:9009/prometheus
 LOKI_URL=http://10.20.0.10:3100
 K8S_API=https://10.10.0.10:6443
-# Jev shadow gates (2026-10-08): off | shadow. shadow records TypeSafe System One answers (triage before the LLM, review after it)
-# next to each diagnosis in ai.jev_shadow and in the harness diagnosis event; it never changes the disposition.
+# Jev gates (2026-10-08): off | shadow | enforce. shadow records TypeSafe System One answers (triage before the LLM, review after it)
+# next to each diagnosis in ai.jev_shadow and in the harness diagnosis event without changing the disposition. enforce additionally
+# downgrades a catalogue proposal to escalate when review.best_action disagrees with confidence >= 0.9 or target_valid < 0.5
+# (campaign-2 report 3.3). Kept at shadow until the C-G1 re-run shows the rules catching a real misjudgement.
 JEV_MODE=shadow
 JEV_MODEL=jev-1.13.0
diff --git a/vm/ai-env/image.tag b/vm/ai-env/image.tag
index 475a45e..317126a 100644
--- a/vm/ai-env/image.tag
+++ b/vm/ai-env/image.tag
@@ -1 +1 @@
-91cdd9a
+13797e5
diff --git a/vm/harness/image.tag b/vm/harness/image.tag
index 098f02e..317126a 100644
--- a/vm/harness/image.tag
+++ b/vm/harness/image.tag
@@ -1 +1 @@
-f30af2a
+13797e5