diff --git a/apps/demo-nginx/Jenkinsfile b/apps/demo-nginx/Jenkinsfile
index 4afa21d..18d1f07 100644
--- a/apps/demo-nginx/Jenkinsfile
+++ b/apps/demo-nginx/Jenkinsfile
@@ -470,17 +470,22 @@ EOF
                             fi
                             echo "   ✅ All pods ready"
                             
-                            # 2. Verify deployment spec image
+                            # 2. Verify pod images (source of truth)
                             echo ""
-                            echo "2. Checking deployment spec image..."
-                            DEPLOYMENT_IMAGE=\$(kubectl get deployment ${APP_NAME} -n ${NAMESPACE} -o jsonpath='{.spec.template.spec.containers[0].image}')
-                            echo "   Deployment spec image: \${DEPLOYMENT_IMAGE}"
+                            echo "2. Checking running pod images..."
+                            POD_IMAGES=$(kubectl get pods -n ${NAMESPACE} -l app=${APP_NAME} \
+                            -o jsonpath='{.items[*].spec.containers[0].image}')
+
+                            echo "   Pod images: ${POD_IMAGES}"
                             echo "   Expected tag: ${IMAGE_TAG}"
-                            
-                            if [[ "\${DEPLOYMENT_IMAGE}" != *"${IMAGE_TAG}"* ]]; then
-                                echo "   ❌ FAILED: Deployment spec has wrong image!"
+
+                            if [[ "${POD_IMAGES}" != *"${IMAGE_TAG}"* ]]; then
+                                echo "   ❌ FAILED: Pods are running wrong image!"
                                 exit 1
                             fi
+
+                            echo "   ✅ All pods are running expected image"
+
                             echo "   ✅ Deployment spec correct"
                             
                             # 3. CRITICAL: Verify actual running pod images