diff --git a/docs/backends/nvx/nvx.md b/docs/backends/nvx/nvx.md
index a34892396..8d6ad9890 100644
--- a/docs/backends/nvx/nvx.md
+++ b/docs/backends/nvx/nvx.md
@@ -30,9 +30,9 @@ From the repository root, build the executor:
 build.bat --with-microvm
 ```
 
-The `aci_edge_sandboxes` crate, pinned to `0.1.1` with `agent-bundled`,
+The `aci_edge_sandboxes` crate, pinned to `0.1.2` with `agent-bundled`,
 downloads and stages its own signed agent bundle. This version pins release
-`v0.1.0-build188642429` (sandbox ABI 3, guest runtime ABI
+`v0.2.0-build189870623` (sandbox ABI 3, guest runtime ABI
 `microvm-abi-v2-edge-ramfs-v7`). Distribute the complete `aci-edge-sandboxes`
 directory beside the executable, including its manifests, runtime binaries,
 guest images, and provenance files. Do not substitute a standalone OpenVMM
@@ -127,7 +127,7 @@ The table describes this MXC integration, not every capability of NVX. The
 signed agent limits workloads to one hour and constrains their working
 directories and environments as described below. Refusal of UI, writable
 stdin, and PTY operations are restrictions of this MXC integration.
-The [signed-agent documentation](https://docs.rs/aci_edge_sandboxes/0.1.1/aci_edge_sandboxes/agent/)
+The [signed-agent documentation](https://docs.rs/aci_edge_sandboxes/0.1.2/aci_edge_sandboxes/agent/)
 describes its contract; the direct OpenVMM backend uses a different guest and
 does not define the limits of this integration.
 
diff --git a/src/Cargo.lock b/src/Cargo.lock
index e92c8ddcb..377cbedad 100644
--- a/src/Cargo.lock
+++ b/src/Cargo.lock
@@ -4,9 +4,9 @@ version = 4
 
 [[package]]
 name = "aci_edge_sandboxes"
-version = "0.1.1"
+version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "997773d086149556da6ccd9433f9a0eef7cc11165fa0de4303e907cf02b7258f"
+checksum = "a19f644326032a112d19a69a74056e2c90a560d1815722e1abdd7c332d8f998e"
 dependencies = [
  "aci_edge_sandboxes_model",
  "libc",
@@ -21,9 +21,9 @@ dependencies = [
 
 [[package]]
 name = "aci_edge_sandboxes_model"
-version = "0.1.1"
+version = "0.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "31e99bf22380ab45a0206618150df066f931e8de6d9f9c19ab2913d61eacce74"
+checksum = "eff5a7832aec130b3e882dafc7ea0711338685828ce0a93ead69e75676083bfd"
 dependencies = [
  "getrandom 0.4.2",
  "humantime",
@@ -1757,9 +1757,9 @@ dependencies = [
 
 [[package]]
 name = "nvx"
-version = "0.1.0-alpha.6"
+version = "0.1.0-alpha.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c9d7438b1556fc07c3d9c3cb8f31358c56ba234c0d023c7ed17c2de7adfe06a3"
+checksum = "ccf8d7df72aff05b55ad9f56da689afdbc1c6e6e83f429e35341022f91e8467d"
 dependencies = [
  "getrandom 0.4.2",
  "nix 0.31.3",
diff --git a/src/mxc-sdk/Cargo.toml b/src/mxc-sdk/Cargo.toml
index e22ab3c5f..2b176a769 100644
--- a/src/mxc-sdk/Cargo.toml
+++ b/src/mxc-sdk/Cargo.toml
@@ -96,7 +96,7 @@ hyperlight-unikraft = { version = "=0.21.0", default-features = false, optional
 ureq = { version = "3", default-features = false, features = ["native-tls", "gzip"], optional = true }
 
 [target.'cfg(all(target_os = "windows", target_arch = "x86_64"))'.dependencies]
-aci_edge_sandboxes = { version = "=0.1.1", default-features = false, features = ["agent-bundled"], optional = true }
+aci_edge_sandboxes = { version = "=0.1.2", default-features = false, features = ["agent-bundled"], optional = true }
 
 [target.'cfg(target_os = "windows")'.dependencies]
 tracelogging.workspace = true
diff --git a/src/mxc-sdk/src/backends/nvx/signature_verification.rs b/src/mxc-sdk/src/backends/nvx/signature_verification.rs
index a34f4a3d1..ee37e3df1 100644
--- a/src/mxc-sdk/src/backends/nvx/signature_verification.rs
+++ b/src/mxc-sdk/src/backends/nvx/signature_verification.rs
@@ -33,10 +33,10 @@ const FILE_SHARE_WRITE: u32 = 2;
 const FILE_ATTRIBUTE_REPARSE_POINT: u32 = 0x400;
 const FILE_FLAG_OPEN_REPARSE_POINT: u32 = 0x0020_0000;
 const FILE_FLAG_BACKUP_SEMANTICS: u32 = 0x0200_0000;
-// SHA256SUMS from the independently approved v0.1.0-build188642429 archive.
-// Its archive SHA-256 is cad4db7c574a73aaa1c5a07e7a740cd2b01d5b83c62c81b2196d63bad9ecc126.
+// SHA256SUMS from the independently approved v0.2.0-build189870623 archive.
+// Its archive SHA-256 is 35de02f4d7decf840f336111b19dc04d36522629b965615bddf5865ea374f704.
 const APPROVED_CHECKSUMS_SHA256: &str =
-    "24d6fcbd2fc22b7618045680c6313db74de3129872c170c25316c12c20145c29";
+    "3df1cd2384764d428902d49c7fa6ad505629298387efae36dab8fe42b954b552";
 
 /// Keeps the checked files from being overwritten or deleted while the runtime uses them.
 #[derive(Debug)]