diff --git a/deploy/idunn-yggdrasil.service b/deploy/idunn-yggdrasil.service
index c63c1ed..1c45594 100644
--- a/deploy/idunn-yggdrasil.service
+++ b/deploy/idunn-yggdrasil.service
@@ -104,8 +104,11 @@ ReadWritePaths=/etc/gamecult/ghostlight/runtime /var/lib/gamecult/ghostlight-wor
 ReadWritePaths=/etc/gamecult/streampixels-service/runtime /var/lib/gamecult/streampixels-service /srv/streampixels-idunn/releases/service
 # StreamPixels web is stateless; it needs only its runtime bundle and releases.
 ReadWritePaths=/etc/gamecult/streampixels-web/runtime /srv/streampixels-idunn/releases/web
-# Vili (motion worker): runtime bundle, state, and releases.
-ReadWritePaths=/etc/gamecult/vili/runtime /var/lib/gamecult/vili /srv/vili-idunn/releases
+# Vili (motion worker): runtime bundle, state, and releases. Prefixed "-" so a
+# target whose roots are not created yet cannot stop Idunn itself from starting
+# (Idunn startup never depends on a managed target). A root created after Idunn
+# starts is writable only from Idunn's next restart.
+ReadWritePaths=-/etc/gamecult/vili/runtime -/var/lib/gamecult/vili -/srv/vili-idunn/releases
 
 [Install]
 WantedBy=multi-user.target