diff --git a/src/frontend/xcecli/cmd/jobs/submit.go b/src/frontend/xcecli/cmd/jobs/submit.go
index 8ccd2c29..db7ddf1b 100755
--- a/src/frontend/xcecli/cmd/jobs/submit.go
+++ b/src/frontend/xcecli/cmd/jobs/submit.go
@@ -400,6 +400,15 @@ func (js *JobSubmitter) BuildJobRequest() (*models.JobSubmitRequest, error) {
 		jobReq.CWD = cwd
 	}
 
+	// bug-1676: assert our own hostname as the submitting host rather than
+	// relying on the server deriving it from the connection (spoofable via
+	// X-Forwarded-For, and only ever an IP, never a hostname) -- matches how
+	// traditional batch schedulers report FROM_HOST. Best-effort: an error
+	// here just leaves FromHost empty, same as omitting the field entirely.
+	if hostname, err := os.Hostname(); err == nil {
+		jobReq.FromHost = hostname
+	}
+
 	if js.askedHosts != "" {
 		jobReq.AskedHosts = js.askedHosts
 	}
diff --git a/src/frontend/xcecli/cmd/jobs/submit_test.go b/src/frontend/xcecli/cmd/jobs/submit_test.go
new file mode 100644
index 00000000..61c1db90
--- /dev/null
+++ b/src/frontend/xcecli/cmd/jobs/submit_test.go
@@ -0,0 +1,27 @@
+package jobs
+
+import (
+	"os"
+	"testing"
+)
+
+// bug-1676: BuildJobRequest asserts our own hostname as FromHost rather than
+// leaving it for the server to derive from the connection (spoofable via
+// X-Forwarded-For, and only ever an IP, never a hostname).
+func TestBuildJobRequest_SetsFromHostToLocalHostname(t *testing.T) {
+	js := NewJobSubmitter(nil)
+	js.command = "sleep 1"
+
+	req, err := js.BuildJobRequest()
+	if err != nil {
+		t.Fatalf("BuildJobRequest: %v", err)
+	}
+
+	wantHost, hostErr := os.Hostname()
+	if hostErr != nil {
+		t.Skipf("os.Hostname() unavailable in this environment: %v", hostErr)
+	}
+	if req.FromHost != wantHost {
+		t.Errorf("FromHost = %q, want local hostname %q", req.FromHost, wantHost)
+	}
+}
diff --git a/src/frontend/xcecli/models/jobs.go b/src/frontend/xcecli/models/jobs.go
index 321f7b17..03940e05 100755
--- a/src/frontend/xcecli/models/jobs.go
+++ b/src/frontend/xcecli/models/jobs.go
@@ -338,6 +338,7 @@ type JobSubmitRequest struct {
 	ChkpntDir          string   `json:"chkpnt_dir,omitempty"`
 	InitChkpntPeriod   int      `json:"init_chkpnt_period,omitempty"`
 	CWD                string   `json:"cwd,omitempty"`
+	FromHost           string   `json:"from_host,omitempty"` // bug-1676: submitting host's own hostname, set by BuildJobRequest via os.Hostname()
 	OutDir             string   `json:"out_dir,omitempty"`
 	InFile             string   `json:"in_file,omitempty"`
 	OutFile            string   `json:"out_file,omitempty"`