diff --git a/CHANGELOG.md b/CHANGELOG.md
index fc38c04..0874051 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ All notable changes to **Tiger Core** (`webtigers/tiger-core`). Format follows
 
 ## [Unreleased]
 
+### Added
+- **Production TigerPASS defaults in `core.ini`.** A fresh install verifies TigerPASS against the WebTigers
+  authority out of the box — `tiger.pass.authority` + a **pinned** `tiger.pass.public_key` (Ed25519), so an
+  unsigned or wrong-key verdict is refused. A dev / self-hosted authority overrides both in the config DB
+  tier (global scope), no deploy.
+
 ### Security
 - **TigerPASS activation now requires a positive, signed `valid` verdict from the authority.** Previously
   `activatePass` only refused a definitive `lapsed` and accepted `unknown` (the ongoing nag-never-disable
diff --git a/configs/core.ini b/configs/core.ini
index c85390f..596212d 100644
--- a/configs/core.ini
+++ b/configs/core.ini
@@ -245,6 +245,15 @@ media.scan.image                 = 0                    ; AWS Rekognition image
 media.scan.video                 = 0                    ; async video moderation + webhook callback
 media.scan.image_threshold       = 80                   ; reject at/above this Rekognition confidence (0-100)
 
+; ── TigerPASS — the WebTigers subscription that unlocks the premium module line ─────────────────
+; The AUTHORITY a licensed "tigerpass" module verifies against, plus the Ed25519 PUBLIC key its
+; signed verdicts are pinned to (an unsigned or wrong-key reply is refused, so a random key can
+; never activate — see Tiger_License_Checker + System_Service_Modules::activatePass). These are the
+; WebTigers PRODUCTION defaults; a dev / self-hosted authority overrides them in the config DB tier
+; (tiger.pass.authority / tiger.pass.public_key, global scope) with no deploy — never edited here.
+tiger.pass.authority             = "https://webtigers.com/shop/authority"
+tiger.pass.public_key            = "MTgEX+sZSDIIDe3vkAmwa3B8PbB1Jv2d6XzsvHM2VCI="
+
 ; staging mirrors production (prod-like); override only what differs per deploy.
 [staging : production]