diff --git a/DISASMER_PUBLIC_TREE.json b/DISASMER_PUBLIC_TREE.json
index 158c09d..f69de6e 100644
--- a/DISASMER_PUBLIC_TREE.json
+++ b/DISASMER_PUBLIC_TREE.json
@@ -1,7 +1,7 @@
 {
   "kind": "disasmer-filtered-public-tree",
-  "source_commit": "9233b1eb4743de23a6837eb0108d08feb1231676",
-  "release_name": "dryrun-9233b1eb4743",
+  "source_commit": "0bdcbac7736ebc2237e80aaa837d7b0d6286252e",
+  "release_name": "dryrun-0bdcbac7736e",
   "filtered_out": [
     "private/**",
     "experiments/**",
diff --git a/scripts/acceptance-environment-contract-smoke.js b/scripts/acceptance-environment-contract-smoke.js
index 5eb0328..f0a8c5c 100755
--- a/scripts/acceptance-environment-contract-smoke.js
+++ b/scripts/acceptance-environment-contract-smoke.js
@@ -164,7 +164,7 @@ if (publicDryrunServiceSmoke && publicDryrunDeployPrep && publicDryrunSystemd &&
     ["deployment prep records service address", publicDryrunDeployPrep, /service_addr:[\s\S]*`\$\{serviceHost\}:\$\{servicePort\}`/],
     ["deployment prep records DNS state", publicDryrunDeployPrep, /dns_publication_state: dnsPublicationState/],
     ["deployment prep records service smoke command", publicDryrunDeployPrep, /public-release-dryrun-service-smoke\.js/],
-    ["systemd binds public TCP 9443", publicDryrunSystemd, /--listen 0\.0\.0\.0:9443/],
+    ["systemd binds public TCP 9443", publicDryrunSystemd, /--listen \[::\]:9443/],
     ["systemd avoids privileged port capability", publicDryrunSystemd, /NoNewPrivileges=true/],
     ["systemd uses dedicated user", publicDryrunSystemd, /User=disasmer[\s\S]*Group=disasmer/],
     ["runbook says externally reachable", publicDryrunRunbook, /externally reachable host/],
diff --git a/scripts/docs-smoke.js b/scripts/docs-smoke.js
index ce262bf..1f5f2fb 100644
--- a/scripts/docs-smoke.js
+++ b/scripts/docs-smoke.js
@@ -137,7 +137,7 @@ const requiredReadmePatterns = [
   ["public dry-run barebones HTML no CSS", /barebones HTML with\s+no CSS/],
   ["browser login plan diagnostic", /disasmer login --browser --plan/],
   ["public dry-run deployment prep", /prepare-public-release-dryrun-deployment\.js/],
-  ["public dry-run systemd unit", /systemd unit that\s+binds `0\.0\.0\.0:9443`/],
+  ["public dry-run systemd unit", /systemd unit that\s+binds `\[::\]:9443`/],
   ["public dry-run e2e runner", /public-release-dryrun-e2e\.js/],
   ["public dry-run e2e gate env", /DISASMER_PUBLIC_RELEASE_DRYRUN_E2E=1/],
   ["public dry-run e2e service address", /DISASMER_PUBLIC_RELEASE_DRYRUN_SERVICE_ADDR=disasmer\.michelpaulissen\.com:9443/],