diff --git a/clusters/unraid-lab/apps/imp-crds/application.yaml b/clusters/unraid-lab/apps/imp-crds/application.yaml
index 81fb922..42bf722 100644
--- a/clusters/unraid-lab/apps/imp-crds/application.yaml
+++ b/clusters/unraid-lab/apps/imp-crds/application.yaml
@@ -9,7 +9,7 @@ spec:
   project: default
   source:
     repoURL: https://github.com/syscode-labs/imp.git
-    targetRevision: f0c11704a101aaf97ed6ce61f0298942548674a5 # v0.6.1
+    targetRevision: 906bf04c7fc5ed10c9067293206af2aee6feea72 # VTEP guardrail canary (adds spec.vtepIP)
     path: config/crd/bases
   destination:
     server: https://kubernetes.default.svc
diff --git a/clusters/unraid-lab/apps/imp/application.yaml b/clusters/unraid-lab/apps/imp/application.yaml
index 7166656..45f205d 100644
--- a/clusters/unraid-lab/apps/imp/application.yaml
+++ b/clusters/unraid-lab/apps/imp/application.yaml
@@ -12,7 +12,7 @@ spec:
   project: default
   sources:
     - repoURL: https://github.com/syscode-labs/imp.git
-      targetRevision: fix/talos-extension-host-paths # VTEP guardrail
+      targetRevision: 906bf04c7fc5ed10c9067293206af2aee6feea72 # VTEP guardrail canary
       path: charts/imp
       helm:
         releaseName: imp
diff --git a/values/clusters/unraid-lab/imp.yaml b/values/clusters/unraid-lab/imp.yaml
index 8bf3bb9..991ee6e 100644
--- a/values/clusters/unraid-lab/imp.yaml
+++ b/values/clusters/unraid-lab/imp.yaml
@@ -4,13 +4,13 @@ operator:
 
 agent:
   image:
-    repository: ghcr.io/syscode-labs/imp-agent@sha256:e000f6219b7fd3d45dbe055e1c4489d5c4e850b94e602d8d2df179ee758957df
+    repository: ghcr.io/syscode-labs/imp-agent@sha256:e5967c476a2f484487e224b3745b122e205a6ba12d0e5806627dc3c7a5b310a2
   env:
     kernelPath: /usr/local/share/imp/vmlinux
 
 runtime:
   image:
-    repository: ghcr.io/syscode-labs/imp-agent@sha256:e000f6219b7fd3d45dbe055e1c4489d5c4e850b94e602d8d2df179ee758957df
+    repository: ghcr.io/syscode-labs/imp-agent@sha256:e5967c476a2f484487e224b3745b122e205a6ba12d0e5806627dc3c7a5b310a2
 
 kvm:
   preflight: