diff --git a/ui/consumer/src/lib/api.ts b/ui/consumer/src/lib/api.ts
index 03b6eb80..3f1fffeb 100644
--- a/ui/consumer/src/lib/api.ts
+++ b/ui/consumer/src/lib/api.ts
@@ -192,10 +192,10 @@ export function useRequestComputeAccess(
 // ── Demo workload: "Global Mesh" ────────────────────────────────────────
 //
 // The Workloads page's "Try the Demo!" card creates the same four objects
-// this manifest does — one unikernel instance in DFW, simulating a
+// this manifest does — one general-purpose (Kata VM) instance in DFW, simulating a
 // six-region mesh (DEMO_MODE=simulate), reachable over a public HTTPProxy URL
 // so it shows up with live "Requests" metrics like any other published
-// workload. No credentials Secret is needed: the unikernel image pulls
+// workload. No credentials Secret is needed: the image pulls
 // anonymously. Names below are per-deploy
 // (`datum-demo-<suffix>` / `datum-demo-net-<suffix>`) rather than fixed, and
 // every object carries `app.kubernetes.io/managed-by: compute-portal-demo` —
@@ -219,7 +219,7 @@ export function useRequestComputeAccess(
 //         networkInterfaces:
 //         - {name: eth0, ipFamilies: [IPv6], network: {name: datum-demo-net-<suffix>}}
 //         runtime:
-//           class: unikernel
+//           class: general-purpose
 //           resources: {instanceType: datumcloud/d1-standard-2}
 //           sandbox:
 //             containers:
@@ -294,14 +294,13 @@ function demoWorkloadPayload(workloadName: string, networkName: string) {
             { name: 'eth0', ipFamilies: ['IPv6'], network: { name: networkName } },
           ],
           runtime: {
-            class: 'unikernel',
+            class: 'general-purpose',
             resources: { instanceType: 'datumcloud/d1-standard-2' },
             sandbox: {
               containers: [
                 {
                   name: 'mesh',
-                  image:
-                    'index.docker.io/scotwells/global-mesh-uk@sha256:6bfeb06ad16e395a6642145024427e37589c4fae33c4ca9932e10704cf7e46d9',
+                  image: 'ghcr.io/datum-labs/compute-network-demo:main',
                   ports: [{ name: 'http', port: 8080, protocol: 'TCP' }],
                   env: [{ name: 'DEMO_MODE', value: 'simulate' }],
                   securityContext: {
diff --git a/ui/consumer/src/pages/workload-list.tsx b/ui/consumer/src/pages/workload-list.tsx
index fd1bf628..88795466 100644
--- a/ui/consumer/src/pages/workload-list.tsx
+++ b/ui/consumer/src/pages/workload-list.tsx
@@ -236,7 +236,7 @@ function WorkloadCliSections({ projectId }: { projectId: string | undefined }) {
 type DemoPhase = "confirm" | "creating" | "waiting" | "ready" | "error";
 
 const DEMO_PHASE_COPY: Record<DemoPhase, string> = {
-  confirm: "This deploys a running workload into your project — one instance in DFW, usually live within a minute.",
+  confirm: "This deploys a running workload into your project — one instance in US-central-1, usually live within a minute.",
   creating: "Deploying your workload…",
   waiting: "Your workload is coming up in the background. You can wait here or head to its page now — it'll keep coming up either way.",
   ready: "Your workload is live.",