diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 830c778..830a6d1 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
   ".": "1.7.1",
-  "browser-extension/chrome": "0.2.1"
+  "browser-extension/chrome": "0.2.2"
 }
diff --git a/browser-extension/chrome/CHANGELOG.md b/browser-extension/chrome/CHANGELOG.md
index af8bfeb..3130866 100644
--- a/browser-extension/chrome/CHANGELOG.md
+++ b/browser-extension/chrome/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.2.2](https://github.com/dcc-mcp/dcc-cua/compare/dcc-cua-browser-extension-v0.2.1...dcc-cua-browser-extension-v0.2.2) (2026-08-31)
+
+
+### Bug Fixes
+
+* **ci:** freeze complete workflow execution surface ([c1db0a4](https://github.com/dcc-mcp/dcc-cua/commit/c1db0a4a2ab3e814d3db3bc8f45978ed9c4bb305))
+* **cli:** enforce structured stream boundaries ([af8a5d6](https://github.com/dcc-mcp/dcc-cua/commit/af8a5d66858a4281b22ed1a51137edb1c24c79cb))
+* contain private worker diagnostics ([b6d6681](https://github.com/dcc-mcp/dcc-cua/commit/b6d668199a3c3b0480c614c0be699c777c7aff78))
+* harden CI artifact identity gates ([988e191](https://github.com/dcc-mcp/dcc-cua/commit/988e1918cc863332880298efe4769b4a52148e0a))
+* remove redundant task authorization gate ([#261](https://github.com/dcc-mcp/dcc-cua/issues/261)) ([013ac8b](https://github.com/dcc-mcp/dcc-cua/commit/013ac8b18546631cb0c44032148aa0f421ab5c28))
+* validate browser extension store artwork ([d7cabae](https://github.com/dcc-mcp/dcc-cua/commit/d7cabae88589b22220e4d90f829652fc35fbb11e))
+
 ## [0.2.1](https://github.com/dcc-mcp/dcc-cua/compare/dcc-cua-browser-extension-v0.2.0...dcc-cua-browser-extension-v0.2.1) (2026-08-26)
 
 
diff --git a/browser-extension/chrome/component-manifest.json b/browser-extension/chrome/component-manifest.json
index 1ade302..23bdae9 100644
--- a/browser-extension/chrome/component-manifest.json
+++ b/browser-extension/chrome/component-manifest.json
@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "name": "dcc-cua-browser-extension",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "distribution": {
     "ordinary_users": [
       "chrome_web_store",
diff --git a/browser-extension/chrome/package-lock.json b/browser-extension/chrome/package-lock.json
index 8737c50..a7ff946 100644
--- a/browser-extension/chrome/package-lock.json
+++ b/browser-extension/chrome/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@dcc-mcp/dcc-cua-browser-extension",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@dcc-mcp/dcc-cua-browser-extension",
-      "version": "0.2.1",
+      "version": "0.2.2",
       "hasInstallScript": true,
       "license": "MIT",
       "devDependencies": {
diff --git a/browser-extension/chrome/package.json b/browser-extension/chrome/package.json
index 280cfe5..f7c38c4 100644
--- a/browser-extension/chrome/package.json
+++ b/browser-extension/chrome/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@dcc-mcp/dcc-cua-browser-extension",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "description": "Cross-browser extension provider for exact, policy-bound dcc-cua browser control",
   "type": "module",