diff --git a/docs/changelog.md b/docs/changelog.md
index 5f1fe696..6be41d8e 100644
--- a/docs/changelog.md
+++ b/docs/changelog.md
@@ -19,6 +19,12 @@ docstring gives: it is a record, not a claim about now.
 
 ## 2026-11-11
 
+- **`wearable-01` reserved at `10.0.50.14`, below the Hicks pool.** This
+  corrects the `.114` the #1416 entry below recorded, which was the watch's
+  lease. The reservation was added in the pfSense UI on 2026-11-11, below the
+  `.100–.200` pool, by the estate's convention. `docs/network.md`
+  and the diagram say `.14`.
+
 - **Three addresses Lemmiwinks recorded differently, checked: HomeLab was
   right on two and wrong on the third**
   ([#1416](https://github.com/Gerrrt/HomeLab/issues/1416)). The issue's other
diff --git a/docs/diagrams/current/network.png b/docs/diagrams/current/network.png
index e3933079..6c72690c 100644
Binary files a/docs/diagrams/current/network.png and b/docs/diagrams/current/network.png differ
diff --git a/docs/diagrams/current/network.svg b/docs/diagrams/current/network.svg
index e1b92922..6d52d09f 100644
--- a/docs/diagrams/current/network.svg
+++ b/docs/diagrams/current/network.svg
@@ -409,7 +409,7 @@
 <rect x="450" y="1220" width="322" height="50" rx="8" class="card"/>
 <rect x="450" y="1226" width="4" height="38" rx="2" fill="#db6d28"/>
 <text x="464" y="1242" class="hn">wearable-01</text>
-<text x="760" y="1242" class="ip" text-anchor="end" fill="#db6d28">.114</text>
+<text x="760" y="1242" class="ip" text-anchor="end" fill="#db6d28">.14</text>
 <text x="464" y="1260" class="sub">Apple Watch</text>
 </g>
 <g class="host" data-host="eero mesh · trusted">
diff --git a/docs/network.md b/docs/network.md
index a0c24f4a..262c2cbc 100644
--- a/docs/network.md
+++ b/docs/network.md
@@ -299,11 +299,15 @@ though not the only one — ImaginationLAN has two host-scoped passes to
 | workstation-02 | `10.0.50.70` | `4c:ea:41:xx:xx:xx` | Microsoft Surface Laptop 6[^Surface] | Windows 11 | Roaming | Corporate |
 | mobile-01 | `10.0.50.105` | `fe:ee:aa:xx:xx:xx` | Apple iPhone[^iPhone16] | iOS 26 | Roaming | Phone |
 | mobile-02 | `10.0.50.109` | `fa:cc:aa:xx:xx:xx` | Google Pixel[^Pixel] | Android 13 | Roaming | Phone |
-| wearable-01 | `10.0.50.114` | `f6:b8:72:xx:xx:xx` | Apple Watch[^Watch10] | watchOS 26 | Roaming | Watch |
+| wearable-01 | `10.0.50.14` | `f6:b8:72:xx:xx:xx` | Apple Watch[^Watch10] | watchOS 26 | Roaming | Watch |
 
 ### Notes
 
 - Desktops are wired Cat6; one eero is wired as backhaul, the other two mesh.
+- **The pool is `.100–.200`, and `wearable-01` is a Kea reservation at `.14`,
+  below it, since 2026-11-11.** It held `.114` by lease before that. The
+  reservation is on the watch's private Wi-Fi address, so it holds only while
+  the watch keeps that address *Fixed* rather than *Rotating* for this network.
 - **What this segment reaches on Winterfell is a list of destinations, not the
   segment.** Twelve passes sit above a logged *Block access to Winterfell*, and
   everything else from 50 to 99 is dropped: