diff --git a/nix/templates/harness-base.nix b/nix/templates/harness-base.nix
index af2fe2fb..46f585d7 100644
--- a/nix/templates/harness-base.nix
+++ b/nix/templates/harness-base.nix
@@ -1650,10 +1650,12 @@ in
     systemd.paths.matrix-avatar-sync = {
       description = "trigger matrix-avatar-sync when a matrix token appears";
       wantedBy = [ "multi-user.target" ];
-      pathConfig.PathExistsGlob = [
-        "/agents/*/state/matrix-token"
-        "/agents/*/state/matrix-token-*"
-      ];
+      # Single `matrix-token*` glob (same as hive-matrix-daemon above) so
+      # both the hive-internal `matrix-token` and any dashboard-provisioned
+      # `matrix-token-<name>` re-fire the sync. A list value here is
+      # unverified for `systemd.paths.*.pathConfig`, and the wildcard
+      # covers both cases anyway.
+      pathConfig.PathExistsGlob = "/agents/*/state/matrix-token*";
     };
 
     # One-shot: hyperhive.icon → matrix profile avatar (two-step media