diff --git a/argocd/manifests/alloy-k8s/kustomization.yaml b/argocd/manifests/alloy-k8s/kustomization.yaml
index 0326190..3503ead 100644
--- a/argocd/manifests/alloy-k8s/kustomization.yaml
+++ b/argocd/manifests/alloy-k8s/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 
 images:
   - name: registry.ops.eblu.me/blumeops/alloy
-    newTag: v1.16.0-26a3ab5
+    newTag: v1.16.0-9564435
 
 configMapGenerator:
   - name: alloy-config
diff --git a/argocd/manifests/alloy-ringtail/kustomization.yaml b/argocd/manifests/alloy-ringtail/kustomization.yaml
index cecae35..526fec5 100644
--- a/argocd/manifests/alloy-ringtail/kustomization.yaml
+++ b/argocd/manifests/alloy-ringtail/kustomization.yaml
@@ -10,7 +10,7 @@ resources:
 
 images:
   - name: registry.ops.eblu.me/blumeops/alloy
-    newTag: v1.16.0-26a3ab5-nix
+    newTag: v1.16.0-9564435-nix
 
 configMapGenerator:
   - name: alloy-config
diff --git a/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml b/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml
index ac25f4a..b1e6338 100644
--- a/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml
+++ b/argocd/manifests/alloy-tracing-ringtail/kustomization.yaml
@@ -9,7 +9,7 @@ resources:
 
 images:
   - name: registry.ops.eblu.me/blumeops/alloy
-    newTag: v1.16.0-26a3ab5-nix
+    newTag: v1.16.0-9564435-nix
 
 configMapGenerator:
   - name: alloy-tracing-config
diff --git a/docs/changelog.d/+alloy-main-sha-rebuild.infra.md b/docs/changelog.d/+alloy-main-sha-rebuild.infra.md
new file mode 100644
index 0000000..42a7b37
--- /dev/null
+++ b/docs/changelog.d/+alloy-main-sha-rebuild.infra.md
@@ -0,0 +1,5 @@
+Rebuild and retag alloy v1.16.0 container images from the main-branch SHA
+following the squash-merge of #345, per the build-container-image
+squash-merge convention. Both images (`registry.ops.eblu.me/blumeops/alloy`)
+now reference `9564435` rather than the branch SHA `26a3ab5`, restoring
+source traceability after branch cleanup.