diff --git a/manifests/hub.yaml b/manifests/hub.yaml
index e0a340a1..1c0bdefd 100644
--- a/manifests/hub.yaml
+++ b/manifests/hub.yaml
@@ -128,7 +128,7 @@ spec:
     spec:
       containers:
         - name: hub
-          image: gitea.dooplex.hu/admin/felhom-hub:0.127.0
+          image: gitea.dooplex.hu/admin/felhom-hub:0.128.0
           ports:
             - containerPort: 8080
               name: http
@@ -160,6 +160,10 @@ spec:
             # documentation/runbooks/secrets.md). NOT optional: without it the hub refuses to store or
             # use any sub-account password, so a missing Secret must fail the pod rather than boot a hub
             # whose off-site registrar is silently off.
+            # TEST CONFIGURATION (2026-10-04, decision 74 live proof on tester-1's scratch dir): set-aside
+            # deletions wait 3 minutes instead of 7 days. REMOVED by the next commit after the proof.
+            - name: OFFSITE_ABANDON_DELAY
+              value: "3m"
             - name: OFFSITE_SECRET_KEY
               valueFrom:
                 secretKeyRef: