diff --git a/config/agentrun.yaml b/config/agentrun.yaml
index f96eabf5..7e8412cc 100644
--- a/config/agentrun.yaml
+++ b/config/agentrun.yaml
@@ -773,14 +773,14 @@ controlPlane:
         localPostgresExpectedAbsent: false
       secrets:
         - id: manager-api-key
-          sourceRef: /root/.config/hwlab-v03/master-server-admin-api-key.env
+          sourceRef: hwlab/jd01-v03-admin.env
           sourceKey: HWLAB_API_KEY
           targetRef:
             namespace: agentrun-v02
             name: agentrun-v02-api-key
             key: HWLAB_API_KEY
         - id: runner-api-key-legacy-name
-          sourceRef: /root/.config/hwlab-v03/master-server-admin-api-key.env
+          sourceRef: hwlab/jd01-v03-admin.env
           sourceKey: HWLAB_API_KEY
           targetRef:
             namespace: agentrun-v02
diff --git a/config/hwlab-node-control-plane.yaml b/config/hwlab-node-control-plane.yaml
index 40af6e58..bf41b3a2 100644
--- a/config/hwlab-node-control-plane.yaml
+++ b/config/hwlab-node-control-plane.yaml
@@ -479,7 +479,7 @@ targets:
       serviceWriteName: git-mirror-write
       cachePvcName: hwlab-git-mirror-cache
       cachePvcStorage: 20Gi
-      cacheHostPath: /var/lib/rancher/k3s/storage/hwlab-jd01-v03-git-mirror-cache
+      cacheHostPath: null
       servicePort: 8080
       readContainerPort: 8080
       writeContainerPort: 8081
diff --git a/config/hwlab-web-probe-sentinel/profiles.yaml b/config/hwlab-web-probe-sentinel/profiles.yaml
index e7b4508f..d6cb4396 100644
--- a/config/hwlab-web-probe-sentinel/profiles.yaml
+++ b/config/hwlab-web-probe-sentinel/profiles.yaml
@@ -195,7 +195,7 @@ nodes:
             baseImageRef: config/hwlab-node-control-plane.yaml#targets[1].tekton.toolsImage.output
             envRecipeRef: config/hwlab-web-probe-sentinel/profiles.yaml#nodes.${NODE}.sentinels.${nodeLower}-web-probe-sentinel.runtime
           targetValidation:
-            scenarioId: workbench-dsflash-go-tool-call-10x
+            scenarioId: workbench-dsflash-go-single-turn-smoke
             maxSeconds: 300
             serviceUnavailablePolicy: structured-failure
         secrets:
diff --git a/config/hwlab-web-probe-sentinel/scenarios.multi-sentinel.yaml b/config/hwlab-web-probe-sentinel/scenarios.multi-sentinel.yaml
index 4c9d9e60..ad2c3bf2 100644
--- a/config/hwlab-web-probe-sentinel/scenarios.multi-sentinel.yaml
+++ b/config/hwlab-web-probe-sentinel/scenarios.multi-sentinel.yaml
@@ -6,6 +6,25 @@ metadata:
   specRef: PJ2026-01060508
 sentinel:
   scenarios:
+    - id: workbench-dsflash-go-single-turn-smoke
+      enabled: true
+      cadence: 10m
+      observeTargetPath: /workbench
+      sampleIntervalMs: 1000
+      screenshotIntervalMs: 60000
+      maxRunSeconds: 300
+      providerProfile: dsflash-go
+      providerProfileMode: exact
+      promptSetRef: config/hwlab-web-probe-sentinel/prompt-set.dsflash-go.yaml#sentinel.promptSet
+      reportViewRef: config/hwlab-web-probe-sentinel/report-views.multi-sentinel.yaml#sentinel.reportViews
+      commandSequence:
+        - type: newSession
+        - type: selectProvider
+          provider: dsflash-go
+        - type: sendPrompt
+          promptSource: promptSet
+          repeat: 1
+
     - id: workbench-dsflash-go-tool-call-10x
       enabled: true
       cadence: 10m