diff --git a/manifests/hub.yaml b/manifests/hub.yaml
index b3aa714..b929a76 100644
--- a/manifests/hub.yaml
+++ b/manifests/hub.yaml
@@ -125,13 +125,18 @@ spec:
     spec:
       containers:
         - name: hub
-          image: gitea.dooplex.hu/admin/felhom-hub:0.55.0
+          image: gitea.dooplex.hu/admin/felhom-hub:0.56.0
           ports:
             - containerPort: 8080
               name: http
           env:
             - name: TZ
               value: "Europe/Budapest"
+            # PBS-DR self-heal reconciler (v0.56.0) — SUPERVISED FIRST ROLLOUT: scope the work set to
+            # the drill guest only until the converged-host no-op is confirmed live on the fleet.
+            # WIDENING = remove this env (empty ⇒ whole fleet, the steady state) in a follow-up sync.
+            - name: PBSDRHEAL_ONLY_HOST
+              value: "demo-vm-felhom-2f4b00"
             # Phase 2 managed updates: global controller-version FLOOR fallback. Any reporting box below
             # this auto-updates to it (unless a per-customer override is set via the operator UI).
             - name: DEFAULT_MIN_CONTROLLER_VERSION