diff --git a/.github/workflows/registry-proxy-deploy.yml b/.github/workflows/registry-proxy-deploy.yml
index 42dd2b7..300daf8 100644
--- a/.github/workflows/registry-proxy-deploy.yml
+++ b/.github/workflows/registry-proxy-deploy.yml
@@ -100,7 +100,7 @@ jobs:
           # push authenticates with the SA token (artifactregistry.writer) and has no
           # staging bucket in the path. --provenance=false → a plain single-arch image
           # Cloud Run accepts (no attestation manifest list).
-          gcloud auth configure-docker "${REGION}-docker.pkg.dev" --quiet
+          gcloud auth configure-docker "${AR_LOCATION}-docker.pkg.dev" --quiet
           echo "build → ${IMAGE}"
           docker build --platform linux/amd64 --provenance=false -t "${IMAGE}" registry-api
           echo "push → ${IMAGE}"
diff --git a/registryV2/README.md b/registryV2/README.md
index a581b4e..04ec338 100644
--- a/registryV2/README.md
+++ b/registryV2/README.md
@@ -299,7 +299,7 @@ The canonical deployment, verified against the live project:
 | Bucket | `gs://dambi-registry-v3-unseo` — `STANDARD`, **UBLA**, **Public Access Prevention enforced**, **versioning on**, soft-delete 7 days, lifecycle: keep the 3 newest noncurrent versions, delete others ≥ 30 days noncurrent |
 | KMS | keyring `registry-signing` / key `bundle-sign-p256` / `ASYMMETRIC_SIGN` `EC_SIGN_P256_SHA256` / **HSM** protection (FIPS 140-2 L3, non-extractable) / version `1` enabled |
 | Proxy service | Cloud Run `registry-api-v3` (see [`../registry-api`](../registry-api)) |
-| Artifact Registry | `asia-northeast1-docker.pkg.dev/project-c2aefc18-2bfc-495a-a3d/dambi` (Docker) |
+| Artifact Registry | `asia-northeast3-docker.pkg.dev/project-c2aefc18-2bfc-495a-a3d/dambi` (Docker, Seoul — a different region from the Cloud Run service) |
 
 **Two service accounts, split by least privilege:**
 
diff --git a/registryV2/scripts/deploy/_common.sh b/registryV2/scripts/deploy/_common.sh
index f361494..b506fa6 100755
--- a/registryV2/scripts/deploy/_common.sh
+++ b/registryV2/scripts/deploy/_common.sh
@@ -28,7 +28,11 @@ BUCKET="${BUCKET:-dambi-registry-v3-unseo}"
 SA_NAME="${SA_NAME:-registry-api-v3-sa}"
 SA_EMAIL="${SA_EMAIL:-${SA_NAME}@${PROJECT_ID}.iam.gserviceaccount.com}"
 SERVICE_NAME="${SERVICE_NAME:-registry-api-v3}"
-AR_REPO="${AR_REPO:-${REGION}-docker.pkg.dev/${PROJECT_ID}/dambi/registry-api}"
+# Artifact Registry lives in a DIFFERENT region from the Cloud Run service:
+# the `dambi` Docker repo was created in Seoul (asia-northeast3) while the
+# service runs in Tokyo (asia-northeast1). Verified 2026-09-14.
+AR_LOCATION="${AR_LOCATION:-asia-northeast3}"
+AR_REPO="${AR_REPO:-${AR_LOCATION}-docker.pkg.dev/${PROJECT_ID}/dambi/registry-api}"
 
 # --- Bundle signing (Cloud KMS, asymmetric EC_SIGN_P256_SHA256) ---------------
 # The detached signatures/<sha>.sig published with the index are produced by