diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml
index 2bc8829..3e997c9 100644
--- a/moldes/consolidado/70-runtime-core.yaml
+++ b/moldes/consolidado/70-runtime-core.yaml
@@ -47,7 +47,7 @@ spec:
             limits:   { cpu: 100m, memory: 64Mi }
       containers:
         - name: runtime-core
-          image: docker.io/library/runtime-core:1.15-anexo-seguro
+          image: docker.io/library/runtime-core:1.16-acesso-app
           # `Never`: a imagem tem de estar no containerd do no ANTES do deploy.
           # "Presente no no" tambem nao e "atual" — conferir a TAG, e nao o nome.
           imagePullPolicy: Never
diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml
index 4870e53..3e2081f 100644
--- a/tenants/acme/65-runtime-core.yaml
+++ b/tenants/acme/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.15-anexo-seguro
+        image: docker.io/library/runtime-core:1.16-acesso-app
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml
index e596a1a..688e135 100644
--- a/tenants/demo/65-runtime-core.yaml
+++ b/tenants/demo/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.15-anexo-seguro
+        image: docker.io/library/runtime-core:1.16-acesso-app
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml
index b93e759..58af04e 100644
--- a/tenants/escolinha/65-runtime-core.yaml
+++ b/tenants/escolinha/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.15-anexo-seguro
+        image: docker.io/library/runtime-core:1.16-acesso-app
         imagePullPolicy: Never
         ports:
         - containerPort: 8083
diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml
index edebbbc..497c6b1 100644
--- a/tenants/piloto/65-runtime-core.yaml
+++ b/tenants/piloto/65-runtime-core.yaml
@@ -21,7 +21,7 @@ spec:
     spec:
       containers:
       - name: runtime-core
-        image: docker.io/library/runtime-core:1.15-anexo-seguro
+        image: docker.io/library/runtime-core:1.16-acesso-app
         imagePullPolicy: Never
         ports:
         - containerPort: 8083