diff --git a/persistent-memory.md b/persistent-memory.md
index f69a09e..805b853 100644
--- a/persistent-memory.md
+++ b/persistent-memory.md
@@ -195,7 +195,7 @@ _As of 2026-09-27 ~0900 PT._
   server runs INSIDE the container, and agents reach it as ssh+docker-exec stdio via
   `scripts/blender-mcp`. No port is published, and screenshots work because server and Blender
   share a filesystem. Telemetry is off and safe mode is on. Verified end to end (render, screenshot,
-  safe-mode refusal). **Registration: PER TASK (Prime, 2026-09-27)**: a session that needs Blender runs `claude mcp add blender -- …/scripts/blender-mcp`. It goes in NO user- or project-wide config.
+  safe-mode refusal). **Batch path: `scripts/blender-run`** (one-shot `docker run --rm`, `--job` staging; first user is draupnir). **Access: the shared fleet `infra-ops` login, with no render-only key (Prime, 2026-09-28).** **Registration: PER TASK (Prime, 2026-09-27)**: a session that needs Blender runs `claude mcp add blender -- …/scripts/blender-mcp`. It goes in NO user- or project-wide config.
   → `stacks/blender/README.md`
 
 ### Zigbee2MQTT on esh-docker-vm (2026-09-27, Prime go-ahead; ha-dev request)