diff --git a/.github/workflows/diffci.yml b/.github/workflows/diffci.yml
index 2b30f4f..f409b23 100644
--- a/.github/workflows/diffci.yml
+++ b/.github/workflows/diffci.yml
@@ -18,8 +18,8 @@ jobs:
       # Run outside the checkout so npm cannot mistake this package for the registry install.
       - name: Observe with the release package or source fallback
         run: |
-          if npm view "@diffci.com/diffci@0.3.5" version >/dev/null 2>&1; then
-            (cd "$RUNNER_TEMP" && npx --yes --package "@diffci.com/diffci@0.3.5" diffci observe --repo "$GITHUB_WORKSPACE" --no-send)
+          if npm view "@diffci.com/diffci@0.3.6" version >/dev/null 2>&1; then
+            (cd "$RUNNER_TEMP" && npx --yes --package "@diffci.com/diffci@0.3.6" diffci observe --repo "$GITHUB_WORKSPACE" --no-send)
           else
             echo "Package 0.3.0-rc.1 is not published yet; validating this release candidate from source."
             npm ci
diff --git a/README.md b/README.md
index 87c2359..e0b4622 100644
--- a/README.md
+++ b/README.md
@@ -198,13 +198,13 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740
 ```
 
 Then check the workflow locally with `npx "@diffci.com/diffci@latest" verify-workflow`. Keep the observer
 out of required checks and other jobs' `needs` lists. The Action adds a job summary and a
 `diffci-observation` artifact to the run; it does not alter which tests your other jobs execute.
-The example pins release `v0.3.5` to its qualified feature commit SHA for reproducibility.
+The example pins release `v0.3.6` to its qualified feature commit SHA for reproducibility.
 
 The CLI sends no report with `--no-send`. The Action uploads a GitHub artifact by default; sending to
 DiffCI's hosted service requires an explicitly configured endpoint and token.
@@ -407,7 +407,7 @@ npm run research:sandbox:deploy
 DiffCI is intended to be installable as infrastructure, not only as a hosted shadow experiment:
 
 ```yaml
-- uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c
+- uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740
 ```
 
 ```bash
diff --git a/docs/adoption-metrics.md b/docs/adoption-metrics.md
index c3d8701..da65250 100644
--- a/docs/adoption-metrics.md
+++ b/docs/adoption-metrics.md
@@ -122,7 +122,7 @@ They are supporting signals only.
 
 | Signal | Value | Interpretation |
 | --- | ---: | --- |
-| npm latest version | `0.3.5` | Current CLI and MCP binaries are publicly available. |
+| npm latest version | `0.3.6` | Current CLI and MCP binaries are publicly available. |
 | npm downloads, last complete registry week (`2026-09-15`–`2026-09-21`) | 1,929 | Distribution activity; not unique users or repositories. |
 | GitHub stars / forks / watchers | 0 / 0 / 0 | No repository-level community conversion yet. |
 | GitHub views, available 14-day window | 18 views / 4 unique visitors | Early discovery signal. |
diff --git a/docs/agent-adoption-kit.md b/docs/agent-adoption-kit.md
index 701dfef..5bce051 100644
--- a/docs/agent-adoption-kit.md
+++ b/docs/agent-adoption-kit.md
@@ -44,7 +44,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c # v0.3.5
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740 # v0.3.6
 ```
 
 Run `npx "@diffci.com/diffci@latest" verify-workflow` before starting a pilot. The Action uploads a
diff --git a/docs/context7/github-action.md b/docs/context7/github-action.md
index 39b58cd..c02e7ad 100644
--- a/docs/context7/github-action.md
+++ b/docs/context7/github-action.md
@@ -15,10 +15,10 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740
 ```
 
-This example pins the Action at the verified `v0.3.5` feature commit. Verify the installed workflow locally:
+This example pins the Action at the verified `v0.3.6` feature commit. Verify the installed workflow locally:
 
 ```sh
 npx "@diffci.com/diffci@latest" verify-workflow
diff --git a/docs/distribution.md b/docs/distribution.md
index 3d159b1..f970b6b 100644
--- a/docs/distribution.md
+++ b/docs/distribution.md
@@ -71,10 +71,10 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740
 ```
 
-The example pins release `v0.3.5` to its qualified feature commit SHA. `npx "@diffci.com/diffci@latest" verify-workflow`
+The example pins release `v0.3.6` to its qualified feature commit SHA. `npx "@diffci.com/diffci@latest" verify-workflow`
 checks that the job is dedicated, read-only, not required by other jobs, and unable to alter the rest
 of CI.
 
diff --git a/docs/npm-adoption.md b/docs/npm-adoption.md
index a563e73..6480042 100644
--- a/docs/npm-adoption.md
+++ b/docs/npm-adoption.md
@@ -38,7 +38,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740
 ```
 
 ## Outreach Copy
diff --git a/package-lock.json b/package-lock.json
index d28d5a3..a849090 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@diffci.com/diffci",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@diffci.com/diffci",
-      "version": "0.3.5",
+      "version": "0.3.6",
       "bundleDependencies": [
         "@diffci.com/core"
       ],
diff --git a/package.json b/package.json
index 992598c..3970b6e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@diffci.com/diffci",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Fail-closed, change-aware verification for AI coding agents with conservative affected-test selection",
   "keywords": [
     "ci",
diff --git a/packaging/agent-plugin/.mcp.json b/packaging/agent-plugin/.mcp.json
index fd2ba43..3efc299 100644
--- a/packaging/agent-plugin/.mcp.json
+++ b/packaging/agent-plugin/.mcp.json
@@ -5,7 +5,7 @@
       "args": [
         "--yes",
         "--package",
-        "@diffci.com/diffci@0.3.5",
+        "@diffci.com/diffci@0.3.6",
         "diffci-mcp"
       ]
     }
diff --git a/packaging/smithery/manifest.json b/packaging/smithery/manifest.json
index fd70a94..163067d 100644
--- a/packaging/smithery/manifest.json
+++ b/packaging/smithery/manifest.json
@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "diffci",
   "display_name": "DiffCI",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Fail-closed verification and affected-test selection for AI coding agents.",
   "long_description": "DiffCI snapshots local or committed changes, selects the minimum executable test verification with conservative full fallback, runs it, and returns a machine-readable receipt. It sends nothing to DiffCI Cloud.",
   "author": {
diff --git a/release-manifest.json b/release-manifest.json
index de4d69a..64fb102 100644
--- a/release-manifest.json
+++ b/release-manifest.json
@@ -4,9 +4,9 @@
   "homepage": "https://diffci.com",
   "packageName": "@diffci.com/diffci",
   "packageDescription": "Fail-closed, change-aware verification for AI coding agents with conservative affected-test selection",
-  "packageVersion": "0.3.5",
-  "actionVersion": "v0.3.5",
-  "actionSha": "12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c",
+  "packageVersion": "0.3.6",
+  "actionVersion": "v0.3.6",
+  "actionSha": "3e8e54d4fec1f94880a82bea7d0edde6fa842740",
   "actionName": "DiffCI observer",
   "actionDescription": "Observation-only change-aware CI analysis. Runs nothing, changes nothing, skips nothing.",
   "marketplaceUrl": "https://github.com/marketplace/actions/diffci-observer",
diff --git a/server.json b/server.json
index 1b6f7cd..672522a 100644
--- a/server.json
+++ b/server.json
@@ -3,7 +3,7 @@
   "name": "io.github.DiffCI/diffci",
   "title": "DiffCI",
   "description": "Fail-closed, change-aware verification for AI coding agents with affected-test guidance.",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "websiteUrl": "https://diffci.com/mcp-server",
   "repository": {
     "url": "https://github.com/DiffCI/DiffCI.com",
@@ -22,7 +22,7 @@
     {
       "registryType": "npm",
       "identifier": "@diffci.com/diffci",
-      "version": "0.3.5",
+      "version": "0.3.6",
       "transport": {
         "type": "stdio"
       },
diff --git a/site/index.html b/site/index.html
index f04c12f..5981cba 100644
--- a/site/index.html
+++ b/site/index.html
@@ -57,7 +57,7 @@
       "applicationCategory": "DeveloperApplication",
       "operatingSystem": "Windows, macOS, Linux",
       "softwareRequirements": "Node.js 22.5 or later and Git",
-      "softwareVersion": "0.3.5",
+      "softwareVersion": "0.3.6",
       "license": "https://www.gnu.org/licenses/agpl-3.0.html",
       "codeRepository": "https://github.com/DiffCI/DiffCI.com",
       "installUrl": "https://www.npmjs.com/package/@diffci.com/diffci",
@@ -237,7 +237,7 @@ <h3>Run it locally or inside CI</h3>
         <h3>Add one non-blocking observer job</h3>
         <p>
           Put DiffCI in its own job so a DiffCI failure cannot become your workflow's conclusion. For
-          a reproducible installation, the example pins release <code>v0.3.5</code> to its qualified feature commit SHA.
+          a reproducible installation, the example pins release <code>v0.3.6</code> to its qualified feature commit SHA.
         </p>
         <pre><code>jobs:
   diffci:
@@ -249,7 +249,7 @@ <h3>Add one non-blocking observer job</h3>
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # immutable checkout pin
         with:
           fetch-depth: 0
-      - uses: DiffCI/DiffCI.com@12e910f5938fe57cb5e5dc2aa3dce3dc7405d00c</code></pre>
+      - uses: DiffCI/DiffCI.com@3e8e54d4fec1f94880a82bea7d0edde6fa842740</code></pre>
         <p class="fine">
           The Action writes a report artifact, prints a summary, and cannot skip tests, cancel jobs,
           comment on pull requests, or change required checks.
diff --git a/site/mcp-server.html b/site/mcp-server.html
index d1c8d20..4231513 100644
--- a/site/mcp-server.html
+++ b/site/mcp-server.html
@@ -17,7 +17,7 @@
 <link rel="stylesheet" href="/styles.css">
 <link rel="icon" type="image/svg+xml" href="/assets/diffci-mark.svg">
 <script type="application/ld+json">
-{"@context":"https://schema.org","@graph":[{"@type":"SoftwareApplication","name":"DiffCI MCP Server","description":"A stateless HTTPS MCP server for change-aware CI validation, affected-test guidance, report interpretation, and GitHub Actions workflow safety checks.","url":"https://diffci.com/mcp-server","applicationCategory":"DeveloperApplication","operatingSystem":"Any MCP client","isAccessibleForFree":true,"softwareVersion":"0.3.5","codeRepository":"https://github.com/DiffCI/DiffCI.com","publisher":{"@id":"https://diffci.com/#organization"}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"DiffCI","item":"https://diffci.com/"},{"@type":"ListItem","position":2,"name":"MCP server","item":"https://diffci.com/mcp-server"}]}]}
+{"@context":"https://schema.org","@graph":[{"@type":"SoftwareApplication","name":"DiffCI MCP Server","description":"A stateless HTTPS MCP server for change-aware CI validation, affected-test guidance, report interpretation, and GitHub Actions workflow safety checks.","url":"https://diffci.com/mcp-server","applicationCategory":"DeveloperApplication","operatingSystem":"Any MCP client","isAccessibleForFree":true,"softwareVersion":"0.3.6","codeRepository":"https://github.com/DiffCI/DiffCI.com","publisher":{"@id":"https://diffci.com/#organization"}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"DiffCI","item":"https://diffci.com/"},{"@type":"ListItem","position":2,"name":"MCP server","item":"https://diffci.com/mcp-server"}]}]}
 </script>
 </head>
 <body>
diff --git a/src/site/mcp-endpoint.ts b/src/site/mcp-endpoint.ts
index 082071c..91a257f 100644
--- a/src/site/mcp-endpoint.ts
+++ b/src/site/mcp-endpoint.ts
@@ -24,7 +24,7 @@ interface ToolCallParams {
   arguments?: Record<string, unknown>;
 }
 
-export const MCP_SERVER_INFO = { name: "io.github.DiffCI/diffci", version: "0.3.5" };
+export const MCP_SERVER_INFO = { name: "io.github.DiffCI/diffci", version: "0.3.6" };
 const SUPPORTED_PROTOCOLS = new Set(["2025-03-26", "2025-06-18", "2025-11-25"]);
 const DEFAULT_PROTOCOL = "2025-11-25";