diff --git a/router/wrangler.jsonc b/router/wrangler.jsonc
index 82bdd490..753ff32b 100644
--- a/router/wrangler.jsonc
+++ b/router/wrangler.jsonc
@@ -41,13 +41,13 @@
     // is cloud-owned and the script name carries a random hash suffix, so it
     // would change if cloud recreates that Worker — re-copy it from the live
     // router's WEBHOOK_WORKER_ORIGIN if webhook routing ever 5xxs.
-    "WEBHOOK_WORKER_ORIGIN": "https://cloud-production-webhookworkerscript-mbehwvfu.agent-workforce.workers.dev"
+    "WEBHOOK_WORKER_ORIGIN": "https://incoming-webhooks.agentrelay.com"
   },
 
-  // Start on a staging hostname for parity verification against the live apex;
-  // flip "pattern" to "agentrelay.com" at the cutover step.
+  // The apex front door. Cloud's prod AgentRelayRouter must have released the
+  // agentrelay.com custom domain (cloud#2461 deployed) before this claims it.
   "routes": [
-    { "pattern": "router-next.agentrelay.com", "custom_domain": true }
+    { "pattern": "agentrelay.com", "custom_domain": true }
   ],
 
   "workers_dev": false,