diff --git a/.gitea/workflows/bump.yml b/.gitea/workflows/bump.yml
index 2e0eadf..d85edba 100644
--- a/.gitea/workflows/bump.yml
+++ b/.gitea/workflows/bump.yml
@@ -28,7 +28,7 @@ name: Lock bump
 
 on:
   schedule:
-    - cron: '39 17 * * *'   # daily 17:39 UTC
+    - cron: '17 5 * * *'   # daily 05:17 UTC
   workflow_dispatch:
 
 jobs:
diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
index 5291fb7..e69b5ec 100644
--- a/docs/ROADMAP.md
+++ b/docs/ROADMAP.md
@@ -1850,7 +1850,7 @@ Design/decision records and a running log of shipped work (items marked
   already eval/build/VM-tested and one hardware promotion away from `v1` —
   worth fast-laning lock-only/security bumps ahead of feature batches.
   **Shipped since:** `.gitea/workflows/check.yml` (eval tier on every main
-  push) and `bump.yml` (daily 17:39 UTC scheduled lock bump, eval + V1
+  push) and `bump.yml` (daily 05:17 UTC scheduled lock bump, eval + V1
   build gate, auto-lands on green — first landing 8fded63, 2026-07-06;
   cadence weekly→daily 2026-07-20).
   2026-07-12: both gates moved from one big `nix flake check --no-build`