diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a663ee1..a600556 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -132,7 +132,7 @@ jobs:
 
   badges:
     needs: [test]
-    if: github.event_name == 'push' && github.ref == 'refs/heads/bringup'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
     permissions:
       contents: write
diff --git a/README.md b/README.md
index 142162b..7cc502b 100644
--- a/README.md
+++ b/README.md
@@ -13,7 +13,7 @@ what runs on real silicon versus what we simulate.
 
 > Status: **bringup.** The hardware **simulator** and its tests, the RV1106 kernel
 > forward-port as a reviewable `patches/` series, the hermetic kernel build, and two
-> Tier-1 drivers at 100% MC/DC are all in and CI-green on the `bringup` branch. What
+> Tier-1 drivers at 100% MC/DC are all in and CI-green on `main`. What
 > remains before this is on the production build path: installing the self-hosted
 > kernel-build runner (see `docs/ci-cd.md`) and having flare-edge consume warden-sdk
 > as a dependency — both [maintainer]-gated. Until then, flare-edge still builds firmware from
diff --git a/docs/ci-cd.md b/docs/ci-cd.md
index 09fbc2b..7bfd6da 100644
--- a/docs/ci-cd.md
+++ b/docs/ci-cd.md
@@ -12,7 +12,7 @@
 | `bench` | ubuntu-latest | Smoke-runs the sim micro-benchmarks; emits ns/op trend JSON. |
 | `patches-apply` | ubuntu-latest | Fetches pristine linux-6.18.46 (cached, sha256-verified) and applies `patches/*` in order. |
 | `kernel-build` | **[self-hosted, warden-sdk]** | `build/build-kernel.sh` → `zImage` + `rv1106-warden.dtb`, uploaded as an artifact. Dispatch-gated until the runner is fully provisioned (below). |
-| `badges` | ubuntu-latest | Renders loc/tests/coverage shields on push to `bringup` (`[skip ci]` + `paths-ignore` loop guard). |
+| `badges` | ubuntu-latest | Renders loc/tests/coverage shields on push to `main` (`[skip ci]` + `paths-ignore` loop guard). |
 
 ## The self-hosted runner (`bfe-mpc-0640`)