diff --git a/README.md b/README.md
index 4bfa634..e91d583 100644
--- a/README.md
+++ b/README.md
@@ -358,24 +358,24 @@ Webhook URL format: `https://matrix.lotusguild.org/webhook/<uuid>`
 > the table lists only the first 8 characters (enough to match Hookshot's logs); the full URLs
 > live in each sender's settings. Full UUIDs were in this file from 2026-02-20 to 2026-11-03,
 > so the IDs below are exposed in git history until rotated (see *Webhook secrets — rotating*).
-> Grafana, Proxmox, Uptime Kuma and Ci-Alert were rotated on 2026-11-03 (the old IDs now return 404).
+> All 13 were rotated on 2026-11-03, so the IDs in git history are dead (they return 404).
 > CI (`readme-no-webhook-ids`) rejects full UUIDs in this README.
 
 | Service | Webhook UUID | Notes |
 |---------|-------------|-------|
 | Grafana | `e713b383…` | Unified alerting contact point |
 | Proxmox | `ca27432c…` | Notification system (8.1+), Discord embed format |
-| Sonarr | `aeffc311…` | All event types |
-| Radarr | `34913454…` | All event types |
-| Readarr | `e57ab4f3…` | All event types |
-| Lidarr | `66ac6fdd…` | All event types |
+| Sonarr | `c3dde7ba…` | All event types |
+| Radarr | `a7584167…` | All event types |
+| Readarr | `3b30c0df…` | All event types |
+| Lidarr | `aee60962…` | All event types |
 | Uptime Kuma | `4b3fb94b…` | Status change notifications |
-| Seerr | `555185af…` | Request/approval events |
-| Owncast (Livestream) | `9993e911…` | STREAM_STARTED / STREAM_STOPPED |
-| Bazarr | `470fb267…` | Subtitle events (Apprise JSON notifier) |
-| Tinker-Tickets | `6e306faf…` | Custom transformation code |
+| Seerr | `9c56d489…` | Request/approval events |
+| Owncast (Livestream) | `ff37824a…` | STREAM_STARTED / STREAM_STOPPED |
+| Bazarr | `263a8301…` | Subtitle events (Apprise JSON notifier) |
+| Tinker-Tickets | `135b040b…` | Custom transformation code |
 | Ci-Alert | `66c1aa17…` | Gitea Actions `notify-failure` jobs (org secret `MATRIX_WEBHOOK_URL`); transform `hookshot/ci-alert.js` |
-| Devdesk | `4a3ccfc9…` | DevDesk "Claude needs you" (CT 126 `devdesk-notify-matrix`, URL in `/etc/devdesk/matrix-webhook`); transform `hookshot/devdesk.js`; avatar set via the appservice token |
+| Devdesk | `db7df1a1…` | DevDesk "Claude needs you" (CT 126 `devdesk-notify-matrix`, URL in `/etc/devdesk/matrix-webhook`); transform `hookshot/devdesk.js`; avatar set via the appservice token |
 
 **Hookshot notes:**
 - Spam and Stuff is intentionally **unencrypted** — hookshot bridges cannot join E2EE rooms