diff --git a/docker-compose.quickstart.yml b/docker-compose.quickstart.yml
index 8bac7e6..5efe708 100644
--- a/docker-compose.quickstart.yml
+++ b/docker-compose.quickstart.yml
@@ -46,15 +46,14 @@
 # and the opt-in dollar ceiling set below, and whose investigator refuses an
 # unsigned approve, which is why the pipe and the investigator both carry the
 # action secret. This file needs all of that, so it cannot point at anything
-# older than 0.8.0; it points at 0.9.1, the same loop with a guard that refuses
-# what it cannot read and a page for a failure that keeps happening, because a
-# stranger should start on the newest.
+# older than 0.8.0; it points at 0.9.2, the same loop with the pipe and the
+# judge on fastapi 0.162.0, because a stranger should start on the newest.
 
 name: hookstack
 
 services:
   hookrelay:
-    image: ghcr.io/itswl/hookrelay:0.9.1@sha256:06895aa522944f6e09225b70f29bfcfc1f6716b09be649aaf7df415662ecb7f9
+    image: ghcr.io/itswl/hookrelay:0.9.2@sha256:ab2e4e5eefb3636595989a4aa62bb96d0816791c171a79d1ce4103f910c78c07
     container_name: hs-hookrelay
     restart: unless-stopped
     environment:
@@ -102,7 +101,7 @@ services:
       - sink
 
   hookjudge:
-    image: ghcr.io/itswl/hookjudge:0.9.1@sha256:cbc648df4c21c3d698f31fab0ba971c6cf6e176661c0a39d244601d1e255867a
+    image: ghcr.io/itswl/hookjudge:0.9.2@sha256:a52b499718c829e6b76f804506126c471fef39250208d5949fb9fc830cfd7f3e
     container_name: hs-hookjudge
     restart: unless-stopped
     environment:
@@ -135,7 +134,7 @@ services:
   # operator would actually have received. It runs from the pipe's own image
   # because that image now carries it — one fewer thing to pull, and no mount.
   sink:
-    image: ghcr.io/itswl/hookrelay:0.9.1@sha256:06895aa522944f6e09225b70f29bfcfc1f6716b09be649aaf7df415662ecb7f9
+    image: ghcr.io/itswl/hookrelay:0.9.2@sha256:ab2e4e5eefb3636595989a4aa62bb96d0816791c171a79d1ce4103f910c78c07
     container_name: hs-sink
     restart: unless-stopped
     command: ["python", "-u", "/app/examples/sink.py"]
@@ -148,7 +147,7 @@ services:
   # exactly the hop a real deployment makes to a custom bot's incoming URL.
   # `ops-feishu` in the baked config is `type: bridge` and points here.
   lark-bridge:
-    image: ghcr.io/itswl/lark-bridge:0.9.1@sha256:9907405c064833bad687d34b458671fd7cd98d567f67a7bf827cdd712e32f1b8
+    image: ghcr.io/itswl/lark-bridge:0.9.2@sha256:54ca2e86787df1125eead9e083e12782fd6a1705d1d26df793a06ab582576240
     container_name: hs-lark-bridge
     restart: unless-stopped
     environment:
@@ -166,7 +165,7 @@ services:
   # not a model: it reports itself as `stub-4o-mini`. Point the judge's AI vars
   # at a real provider and this stops being used.
   stub-ai:
-    image: ghcr.io/itswl/hookjudge:0.9.1@sha256:cbc648df4c21c3d698f31fab0ba971c6cf6e176661c0a39d244601d1e255867a
+    image: ghcr.io/itswl/hookjudge:0.9.2@sha256:a52b499718c829e6b76f804506126c471fef39250208d5949fb9fc830cfd7f3e
     container_name: hs-stub-ai
     restart: unless-stopped
     command: ["python", "-u", "/app/examples/stub_ai.py"]
@@ -178,7 +177,7 @@ services:
   # pipe to the same channels; the disk alert in demo.sh also proposes a
   # two-step procedure the approve button runs against the allowlist below.
   hookprobe:
-    image: ghcr.io/itswl/hookprobe:0.9.1@sha256:d35f25252d93b778a7f2b10d20bd1d7360835c61f454450bf213e6ff4cfab924
+    image: ghcr.io/itswl/hookprobe:0.9.2@sha256:a7bcdf6571e9434347192ec3dd0618e0fa9874cd650c0c9466ed7f9af1d7ebcb
     container_name: hs-hookprobe
     restart: unless-stopped
     # The agent executes arbitrary bash, so the container is bounded even in a