diff --git a/charts/nudgebee-agent/values.schema.json b/charts/nudgebee-agent/values.schema.json
new file mode 100644
index 00000000..ccdaac08
--- /dev/null
+++ b/charts/nudgebee-agent/values.schema.json
@@ -0,0 +1,25 @@
+{
+  "$schema": "https://json-schema.org/draft-07/schema#",
+  "title": "nudgebee-agent",
+  "description": "Top-level values accepted by the nudgebee-agent chart. Rejects unknown top-level keys (e.g. typos, or keys copied from unrelated charts/docs) so a misconfigured value fails at `helm install`/`upgrade` time instead of silently no-oping.",
+  "type": "object",
+  "properties": {
+    "nameOverride": { "type": "string" },
+    "fullnameOverride": { "type": "string" },
+    "enablePrometheusStack": { "type": "boolean" },
+    "automountServiceAccountToken": { "type": "boolean" },
+    "globalConfig": { "type": "object" },
+    "enableServiceMonitors": { "type": "boolean" },
+    "kubewatch": { "type": "object" },
+    "runnerServiceAccount": { "type": "object" },
+    "runner": { "type": "object" },
+    "nodeAgent": { "type": "object" },
+    "opencost": { "type": "object" },
+    "rsa": { "type": ["object", "null"] },
+    "openshift": { "type": "object" },
+    "opentelemetry-collector": { "type": "object" },
+    "clickhouse": { "type": "object" },
+    "alertmanager": { "type": "object" }
+  },
+  "additionalProperties": false
+}
diff --git a/charts/nudgebee-agent/values.yaml b/charts/nudgebee-agent/values.yaml
index 4f3ccffa..1b28c856 100644
--- a/charts/nudgebee-agent/values.yaml
+++ b/charts/nudgebee-agent/values.yaml
@@ -61,7 +61,7 @@ runnerServiceAccount:
 runner:
   image:
     repository: ghcr.io/nudgebee/nudgebee-agent
-    tag: 2026-07-04T08-07-20_16e73b6bee276ad9e112b06f69d8a88f91e52ec1
+    tag: 2026-07-04T11-16-26_e1730394cb5e420b38fb79351f2a23ab46490ede
   # Image template the pod_profiler action launches debugger pods from.
   # The agent substitutes `{}` for the variant (bpf, jvm, python, perf, ruby).
   # Surfaces as PROFILER_IMAGE; leave empty to fall back to the binary default.