diff --git a/tooling/release/npm-installer/README.md b/tooling/release/npm-installer/README.md
index 37893d3..150faa5 100644
--- a/tooling/release/npm-installer/README.md
+++ b/tooling/release/npm-installer/README.md
@@ -18,7 +18,7 @@ Local candidate verification without publication:
 AIW_TEST_ARCHIVE=/path/to/AgentIntersect-World-0.15.0-rc.2-linux-x64.tar.gz node --test tooling/release/npm-installer/test/install.test.mjs
 ```
 
-The test uses `--archive` solely to supply the **same exact pinned archive** locally; it still checks the checksum. This unpublished candidate pairs with the clean application source `7b97db1fb2c4490cabc0d606a0cf55585390c4bb` archive, SHA-256 `aab167c13ab20ca98dd721b56a8f5d34f394913969512f1fcbca84bff7b3b9d7`. Application and bootstrap source commits are recorded separately in the private kit. Do not mix older rc.2 archive or npm tarball bytes with this pair.
+The test uses `--archive` solely to supply the **same exact pinned archive** locally; it still checks the checksum. This unpublished candidate pairs with the clean application source `aea6234ecd9c3386b346d5f35ad47dd404f387cd` archive, SHA-256 `8ac77357fdaa709226ea19b3edfeb065ad20daddab3179694b847d394f27436f`. Application and bootstrap source commits are recorded separately in the private kit. Do not mix older rc.2 archive or npm tarball bytes with this pair.
 
 For private transfer, use the exact local npm tarball and app archive from the same checksum-verified kit:
 
diff --git a/tooling/release/npm-installer/install.mjs b/tooling/release/npm-installer/install.mjs
index 2bfbba2..b202e01 100644
--- a/tooling/release/npm-installer/install.mjs
+++ b/tooling/release/npm-installer/install.mjs
@@ -19,7 +19,7 @@ import { pipeline } from "node:stream/promises";
 const version = "0.15.0-rc.2";
 const name = `AgentIntersect-World-${version}-linux-x64`;
 const sha256 =
-  "aab167c13ab20ca98dd721b56a8f5d34f394913969512f1fcbca84bff7b3b9d7";
+  "8ac77357fdaa709226ea19b3edfeb065ad20daddab3179694b847d394f27436f";
 const url = `https://github.com/MelaBuilt-AI/AgentIntersect-World/releases/download/v${version}/${name}.tar.gz`;
 
 async function exists(path) {
diff --git a/tooling/release/npm-installer/test/install.test.mjs b/tooling/release/npm-installer/test/install.test.mjs
index 44cdce0..a549d5b 100644
--- a/tooling/release/npm-installer/test/install.test.mjs
+++ b/tooling/release/npm-installer/test/install.test.mjs
@@ -75,7 +75,7 @@ test(
       assert.equal(
         JSON.parse(readFileSync(join(installed, "BUILD.json"), "utf8"))
           .sourceCommit,
-        "7b97db1fb2c4490cabc0d606a0cf55585390c4bb",
+        "aea6234ecd9c3386b346d5f35ad47dd404f387cd",
       );
       const repeat = run();
       assert.equal(repeat.status, 0, repeat.stderr);