diff --git a/pmoves/services/agent-zero/Dockerfile.multiarch b/pmoves/services/agent-zero/Dockerfile.multiarch
index 4b7ad5feb8..e5a73995b8 100644
--- a/pmoves/services/agent-zero/Dockerfile.multiarch
+++ b/pmoves/services/agent-zero/Dockerfile.multiarch
@@ -23,8 +23,8 @@ ARG AGENT_ZERO_REPO=https://github.com/POWERFULMOVES/PMOVES-Agent-Zero.git
 # overlay - path containment, the dockerized root-password skip, the removal of
 # root supervisord programs. The fork also carries no tags at all, so a tag here
 # fails the clone outright rather than silently shipping an unhardened image.
-ARG AGENT_ZERO_UPSTREAM_VERSION=v2.10
-ARG AGENT_ZERO_REF=PMOVES.AI-Edition-Hardened
+ARG AGENT_ZERO_UPSTREAM_VERSION=v2.11
+ARG AGENT_ZERO_REF=v2.11
 
 # Clone PMOVES fork of Agent Zero (matches submodule branch).
 #