diff --git a/terraform/do/network.tf b/terraform/do/network.tf
index 219f8bf..8e84f48 100644
--- a/terraform/do/network.tf
+++ b/terraform/do/network.tf
@@ -14,15 +14,25 @@ resource "digitalocean_vpc" "store" {
 }
 
 resource "digitalocean_project" "store" {
-  name        = var.project_name
-  description = "Canonical store/backend tier for lilith-platform (replaces dead homelan 'black')."
+  # Project name decoupled from var.project_name ON PURPOSE: "lilith" is a relic;
+  # the canonical home is "cocotte-store". We do NOT rename var.project_name here
+  # because it also names the managed PG (lilith-store-pg) and VPC, and a DB-cluster
+  # rename is ForceNew = data loss. Resource-name relics get migrated separately.
+  name        = "cocotte"
+  description = "Cocotte (ct) producer: store/backend tier (apps, MCP, managed PG, media) + ephemeral test fleet. One env, one user — no dev/prod split."
   purpose     = "Web Application"
   environment = "Production"
 
+  # Full ct store/backend tier membership (authoritative — DO puts each resource
+  # in exactly one project). quinn-owned hosts (artifacts, infra) live in the
+  # separate `quinn` project; mc artifacts stay in the mc:dev default.
   resources = [
     digitalocean_droplet.backend.urn,
+    digitalocean_droplet.redroid.urn,
     digitalocean_database_cluster.pg.urn,
     digitalocean_spaces_bucket.media.urn,
+    digitalocean_volume.redroid_data.urn,
+    digitalocean_reserved_ip.backend.urn,
   ]
 }