diff --git a/README.md b/README.md
index 4f03b28..d2b476c 100644
--- a/README.md
+++ b/README.md
@@ -11,11 +11,11 @@ integration PRs, follows `main` through production, and pauses after failures.
 
 ## Install
 
-Install the reviewed `v0.2.20` source commit directly from GitHub:
+Install the reviewed `v0.2.21` source commit directly from GitHub:
 
 ```bash
 python3 -m pip install \
-  'deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@3bf238140fba3d4d5fbd2d739b9f5422e99567dd'
+  'deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@ecc5f60e90d6201daddf3764be60cb7122360722'
 deploybot init
 ```
 
@@ -95,7 +95,7 @@ worker can dispatch deployment when GitHub suppresses the `workflow_run` event
 for token-dispatched CI. Pin the Action to the full reviewed release commit:
 
 ```yaml
-- uses: Forward-Future/DeployBot@3bf238140fba3d4d5fbd2d739b9f5422e99567dd
+- uses: Forward-Future/DeployBot@ecc5f60e90d6201daddf3764be60cb7122360722
 ```
 
 The Action uses GitHub's built-in workflow token. GitHub intentionally does not
diff --git a/adapters/claude-code/.claude-plugin/plugin.json b/adapters/claude-code/.claude-plugin/plugin.json
index 46d2fc4..d36f98c 100644
--- a/adapters/claude-code/.claude-plugin/plugin.json
+++ b/adapters/claude-code/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "deploybot",
-  "version": "0.2.20",
+  "version": "0.2.21",
   "description": "DeployBot: a provider-neutral GitHub merge queue for coding agents",
   "author": {
     "name": "DeployBot contributors"
diff --git a/adapters/claude-code/.mcp.json b/adapters/claude-code/.mcp.json
index 8d7dc8a..ac4afcf 100644
--- a/adapters/claude-code/.mcp.json
+++ b/adapters/claude-code/.mcp.json
@@ -4,7 +4,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@3bf238140fba3d4d5fbd2d739b9f5422e99567dd",
+        "deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@ecc5f60e90d6201daddf3764be60cb7122360722",
         "deploybot-mcp"
       ]
     }
diff --git a/adapters/codex/agent-merge-queue/.codex-plugin/plugin.json b/adapters/codex/agent-merge-queue/.codex-plugin/plugin.json
index 52849ec..1c47ba4 100644
--- a/adapters/codex/agent-merge-queue/.codex-plugin/plugin.json
+++ b/adapters/codex/agent-merge-queue/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "deploybot",
-  "version": "0.2.20",
+  "version": "0.2.21",
   "description": "Coordinate exact-head pull requests through verified deployment and thread notification",
   "author": {
     "name": "DeployBot contributors"
diff --git a/adapters/cursor/.cursor/mcp.json b/adapters/cursor/.cursor/mcp.json
index 8d7dc8a..ac4afcf 100644
--- a/adapters/cursor/.cursor/mcp.json
+++ b/adapters/cursor/.cursor/mcp.json
@@ -4,7 +4,7 @@
       "command": "uvx",
       "args": [
         "--from",
-        "deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@3bf238140fba3d4d5fbd2d739b9f5422e99567dd",
+        "deploybot-merge-queue[mcp] @ git+https://github.com/Forward-Future/DeployBot.git@ecc5f60e90d6201daddf3764be60cb7122360722",
         "deploybot-mcp"
       ]
     }
diff --git a/docs/reference.md b/docs/reference.md
index 8c251ce..d912da3 100644
--- a/docs/reference.md
+++ b/docs/reference.md
@@ -1,7 +1,7 @@
 # DeployBot reference
 
 This reference describes the CLI, MCP server, policy file, and GitHub Action in
-DeployBot v0.2.20. GitHub labels and authenticated comments are the durable state;
+DeployBot v0.2.21. GitHub labels and authenticated comments are the durable state;
 the CLI and MCP tools are two interfaces to the same operations.
 
 ## CLI
diff --git a/examples/github-workflow.yml b/examples/github-workflow.yml
index b9970d4..9bbcd9e 100644
--- a/examples/github-workflow.yml
+++ b/examples/github-workflow.yml
@@ -77,5 +77,5 @@ jobs:
         with:
           ref: ${{ github.event.repository.default_branch }}
           persist-credentials: false
-      # v0.2.20 implementation; keep the full commit for privileged workflows.
-      - uses: Forward-Future/DeployBot@3bf238140fba3d4d5fbd2d739b9f5422e99567dd
+      # v0.2.21 implementation; keep the full commit for privileged workflows.
+      - uses: Forward-Future/DeployBot@ecc5f60e90d6201daddf3764be60cb7122360722
diff --git a/pyproject.toml b/pyproject.toml
index b703060..87fd35f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deploybot-merge-queue"
-version = "0.2.20"
+version = "0.2.21"
 description = "DeployBot: a provider-neutral GitHub merge queue for coding agents"
 readme = "README.md"
 license = "MIT"
diff --git a/src/agent_merge_queue/__init__.py b/src/agent_merge_queue/__init__.py
index 5c5d565..70bf889 100644
--- a/src/agent_merge_queue/__init__.py
+++ b/src/agent_merge_queue/__init__.py
@@ -1,3 +1,3 @@
 """DeployBot: a provider-neutral GitHub merge queue for coding agents."""
 
-__version__ = "0.2.20"
+__version__ = "0.2.21"
diff --git a/tests/test_skill.py b/tests/test_skill.py
index 357ce40..1e446d6 100644
--- a/tests/test_skill.py
+++ b/tests/test_skill.py
@@ -8,7 +8,7 @@
 
 ROOT = Path(__file__).resolve().parents[1]
 CANONICAL = ROOT / "skills" / "deploybot" / "SKILL.md"
-RELEASE_COMMIT = "3bf238140fba3d4d5fbd2d739b9f5422e99567dd"
+RELEASE_COMMIT = "ecc5f60e90d6201daddf3764be60cb7122360722"
 CHECKOUT_COMMIT = "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"