diff --git a/manifest.json b/manifest.json
index f191f2f..c99c859 100644
--- a/manifest.json
+++ b/manifest.json
@@ -2,7 +2,7 @@
   "manifest_version": "0.3",
   "name": "agent-candidate",
   "display_name": "Agent Candidate",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Turn a job posting into a full application kit through the real candidate-suite generators: posting brief, cover letter, strategic playbook, application summary, interview prep, and a one-page quick-reference card. The untrusted posting is sanitised at ingestion and untrusted-origin identifiers are tripwired before the letter is written.",
   "long_description": "Agent Candidate turns a job posting into six deliverables through the real candidate-suite generators: a posting brief (.md), a cover letter (.docx), a strategic playbook (.md), an application summary (.md), interview prep (.md), and a one-page quick-reference card (.md). The posting is loaded as reference data (not instructions): non-rendered content is stripped at ingestion, and any identifier of untrusted origin that reaches the letter is refused before the document is produced. The candidate profile used to fill the letter is the developer's fictional sample data.",
   "author": {
diff --git a/server/chain_core.py b/server/chain_core.py
index 5819754..02d560e 100644
--- a/server/chain_core.py
+++ b/server/chain_core.py
@@ -58,7 +58,7 @@
 # manifest.json by test_frozen_server T0 (serverInfo.version == manifest), the
 # same shape as the tools/list <-> manifest parity (T1). Bump here AND in the
 # manifest in the same commit; the assert refuses a half-bump.
-SERVER_VERSION = "0.2.1"
+SERVER_VERSION = "0.2.2"
 
 # Language-neutral sentinel, identical to the real scripts (LNG-2 S3b):
 # a critical field that is empty OR equals this token is refused, never invented.