diff --git a/README.md b/README.md
index fb0863d..f40b941 100644
--- a/README.md
+++ b/README.md
@@ -17,19 +17,39 @@ client workstations during on-site work with short, hand-typeable commands.
 Fetch and read on the target workstation:
 
 ```powershell
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/<file> | more
+irm rb.godwinsystems.com/<file> | more
 ```
 
 Run an executable runbook script directly (scripts live under `scripts/`):
 
 ```powershell
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/<file>.ps1 | iex
+irm rb.godwinsystems.com/scripts/<file>.ps1 | iex
 ```
 
 Scripts prompt for anything client-specific via `Read-Host` — nothing to edit
 before running. See [`scripts/_template.ps1`](scripts/_template.ps1) for the
 convention.
 
+No scheme is needed: PowerShell defaults a scheme-less URI to `http://`, and
+`rb.godwinsystems.com` answers on :80 with a 301 to HTTPS.
+
+### About that hostname
+
+`rb.godwinsystems.com` is a 302 redirect to this repo's raw path on Gitea. It
+exists because these commands are hand-typed on client machines, often
+mid-incident — the canonical URL is 63 characters before the filename. The
+canonical form still works and is what the redirect targets:
+
+```
+https://gitea.ivangodwin.com/godwinsystems/rb/raw/branch/main/<file>
+```
+
+The redirect is a backendless Gateway API `HTTPRoute` defined in
+`kubernetes-gitops` at `manifests/apps/rb-redirect/`, with a listener on the
+public gateway and a DNS-only A record for `rb`. **If that route is ever
+removed, update the commands above in the same change** — otherwise every
+runbook here documents a dead URL.
+
 ## Layout & naming
 
 - **Runbooks** (`.md`) live flat at the repo root with short, hand-typeable
diff --git a/od-backup-schedule.md b/od-backup-schedule.md
index 0ccdc58..21db678 100644
--- a/od-backup-schedule.md
+++ b/od-backup-schedule.md
@@ -67,7 +67,7 @@ schtasks /Create /TN "OD Backup Health Check" ^
 The check is **read-only** — no DB, no service, no file changes — so it's safe to run any time, including a manual spot-check:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-backup-check.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-backup-check.ps1 | iex
 ```
 
 ---
diff --git a/od-cfg-persist.md b/od-cfg-persist.md
index e746f58..bd634f5 100644
--- a/od-cfg-persist.md
+++ b/od-cfg-persist.md
@@ -44,7 +44,7 @@ Grant the built-in **Users** group **Modify** on `FreeDentalConfig.xml` so Open
 Fastest, from an **elevated** PowerShell:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-cfg-acl.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-cfg-acl.ps1 | iex
 ```
 
 It resolves the install path (64-bit / 32-bit Program Files), confirms, and grants the permission.
diff --git a/od-db-backup.md b/od-db-backup.md
index 9c75c48..f398159 100644
--- a/od-db-backup.md
+++ b/od-db-backup.md
@@ -56,7 +56,7 @@ The script below does both, and **always restarts the service** (even if the cop
 From an **elevated** PowerShell on the server:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-db-backup.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-db-backup.ps1 | iex
 ```
 
 It will:
diff --git a/od-smb-cred.md b/od-smb-cred.md
index 9320928..3da56db 100644
--- a/od-smb-cred.md
+++ b/od-smb-cred.md
@@ -41,7 +41,7 @@ System Summary → **Virtualization-based security Services Running**
 Fastest, from an **elevated** PowerShell:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/cg-disable.ps1 | iex
+irm rb.godwinsystems.com/scripts/cg-disable.ps1 | iex
 ```
 
 It confirms, clears the flags, and prompts to reboot.