diff --git a/docker/agent/Dockerfile b/docker/agent/Dockerfile
index f339a39..3cd9d47 100644
--- a/docker/agent/Dockerfile
+++ b/docker/agent/Dockerfile
@@ -5,8 +5,8 @@
 
 # Each release tag sits beside the digest of its asset, as in scrutineer's Dockerfile.runner, so a version
 # bump updates both and a mismatch fails sha256sum below.
-ARG CLAUDE_AMD64_LOCK=v2.1.301@sha256:40d2cbbd74a43e9ed683c9f8f93afdadeed09d16d56095fe1e46dedaa1728082
-ARG CLAUDE_ARM64_LOCK=v2.1.301@sha256:a19875467f8125449a39ebe0467e11b04be8a3130e100783043fc281ef6ed4a3
+ARG CLAUDE_AMD64_LOCK=v2.1.302@sha256:0d865f10fe49f2e731ab9d4f7bdcce082cad4f7bbf71d2cbbf7be47b9d8ae5dc
+ARG CLAUDE_ARM64_LOCK=v2.1.302@sha256:812a10792bf91bccba6de57b86c2ff055264037b99011cfd558db8e6967760c3
 ARG CODEX_AMD64_LOCK=rust-v0.163.0@sha256:582646c6bf0561eb0de540f7fc85b9121b0091a826bc6e96830b7f1722122182
 ARG CODEX_ARM64_LOCK=rust-v0.163.0@sha256:9d8ecf2d19d3e184877983902d6c85de48b3888dcb72c382a8a0c975845927fb
 ARG HARNESS_VERSION=v0.1.16