diff --git a/CHANGELOG.md b/CHANGELOG.md
index f0c61f3..8758763 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,10 @@ re-mount (the drive would show "Leválasztva" in the controller).
   the `/mnt/felhom-drives` bind (AttachDrive wants the raw path). Observe entries still win. Also: an
   Observe failure is no longer fatal (fall through to the mount-table scan) so raw drives re-assert even
   if the PVE view is momentarily unavailable.
+- **Wiring fix (latent):** `buildLocalAPIServer` never passed `Options.HostReader`, so the local-API
+  server's `host` was nil in production — the v0.56.0 `durableIDForMount` raw fallback (and the role gate's
+  host classification) silently no-op'd. Now wired to `storage.NewProcHostReader()`. This is what makes
+  the v0.56.0 + v0.57.0 raw-mount resolutions actually fire live.
 - `go build/vet/test ./...` clean. With v0.56.0 (guest-bind now RECORDED for raw drives) this closes the
   reboot/reconnect guest-bind durability gap for raw drives end-to-end.
 
diff --git a/cmd/felhom-agent/main.go b/cmd/felhom-agent/main.go
index 7255a4d..2bd8ee8 100644
--- a/cmd/felhom-agent/main.go
+++ b/cmd/felhom-agent/main.go
@@ -767,6 +767,7 @@ func buildLocalAPIServer(cfg config.Config, px *proxmox.Client, store *backup.St
 		Store:         store,
 		Storage:       observer,
 		DriveTargets:  driveTargets, // Impl-2a: registry+units drives for the /disks view (union w/ Observe storages)
+		HostReader:    storage.NewProcHostReader(), // Impl-2b: durableIDForMount raw-mount fallback + role gate
 		Tokens:        tokens,
 		BackupCadence: cfg.Backup.BackupCadence(),
 		// Disk management (slice 8C): the privileged host surface + the data-bearing wipe gate.