diff --git a/CHANGELOG.md b/CHANGELOG.md
index e58f67d6..ea3083b8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -237,6 +237,12 @@ Detailed per-release notes are on the
   while data exchange or event stream is enabled; its other locked settings
   are unchanged.
 - SIGHUP no longer reloads control state. It is still caught and ignored.
+- **Governed envelopes in the plugins.** dataexchange v0.3.0, eventstream
+  v0.3.0 and handshake v0.3.0 no longer contain the governed-send,
+  governed-publication and action-hook code the hosted control plane used.
+  A node that receives a data-exchange frame of type 8 or 9 (the retired
+  governed types) now answers `ERR ... unsupported frame type`, as for any
+  unknown type; before it answered that no verifier was configured.
 
 ### Changed
 - **The tunnel socket asks the kernel for 4 MB buffers** in each direction
diff --git a/go.mod b/go.mod
index ebbba095..34f6f034 100644
--- a/go.mod
+++ b/go.mod
@@ -7,9 +7,9 @@ require (
 	github.com/pilot-protocol/app-store v1.0.5
 	github.com/pilot-protocol/beacon v0.2.10
 	github.com/pilot-protocol/common v0.5.15
-	github.com/pilot-protocol/dataexchange v0.2.3
-	github.com/pilot-protocol/eventstream v0.2.4
-	github.com/pilot-protocol/handshake v0.2.8
+	github.com/pilot-protocol/dataexchange v0.3.0
+	github.com/pilot-protocol/eventstream v0.3.0
+	github.com/pilot-protocol/handshake v0.3.0
 	github.com/pilot-protocol/policy v0.2.3
 	github.com/pilot-protocol/rendezvous v0.2.8
 	github.com/pilot-protocol/runtime v0.3.2
diff --git a/go.sum b/go.sum
index 83b666c6..150acc18 100644
--- a/go.sum
+++ b/go.sum
@@ -241,12 +241,12 @@ github.com/pilot-protocol/beacon v0.2.10 h1:RT40+IzU0cRgREJWZwYca3nA70+qhhsG3G95
 github.com/pilot-protocol/beacon v0.2.10/go.mod h1:TPzemcFEopN+nUEwTkkDNPtMQpGMyi5GrDvQsg6xVTg=
 github.com/pilot-protocol/common v0.5.15 h1:ds6DNWlth97pMcXZ7fMgfy9/s553la3/YuYOkwoXjjE=
 github.com/pilot-protocol/common v0.5.15/go.mod h1:OTXD84ScrBbKTAhawgFlLw9HtisgNvr83Zs1yDAuG9k=
-github.com/pilot-protocol/dataexchange v0.2.3 h1:AjONOaN3hp5oNswIfhYhM1vpcuiVq395TEsR28Dt5NA=
-github.com/pilot-protocol/dataexchange v0.2.3/go.mod h1:j7ezzA2VRNXMz4abZkBWIgniIDOznDfKbdbNSMZrwPg=
-github.com/pilot-protocol/eventstream v0.2.4 h1:SyB64wqo+Qpz0hIAuzHGkI9Npwk5SFSg1aqNFLueUIQ=
-github.com/pilot-protocol/eventstream v0.2.4/go.mod h1:ccBhrLd2vUj70bStS/FJHg7DhjeZ0jinOls6Et4U5cg=
-github.com/pilot-protocol/handshake v0.2.8 h1:UwgExk4Shy01s1S0O5uh96zp2mZ25WamuSGQ+CJECQg=
-github.com/pilot-protocol/handshake v0.2.8/go.mod h1:zJBCcuDnYhVFGTDAm4LtWpei6PBmuaVkTZEh1SfY1Wo=
+github.com/pilot-protocol/dataexchange v0.3.0 h1:dQsPMEPqKJ/cLy/qOzKoI0w/ZIiDAEH+8Ws1p20V9eo=
+github.com/pilot-protocol/dataexchange v0.3.0/go.mod h1:G2sKuDEw06hJq1chA78dGN+mCyzxgHJ6RpvSyAlKBKc=
+github.com/pilot-protocol/eventstream v0.3.0 h1:HZmIrbi2tfYBfMBPIc0bG4JISAhmTS3v8c0Xj9LS/RU=
+github.com/pilot-protocol/eventstream v0.3.0/go.mod h1:dQaGmsAY4zHLXC5dhwLsJj8fY54Uu/HxAmgn3HWCtb4=
+github.com/pilot-protocol/handshake v0.3.0 h1:JKDFJ81vFxuZ+eeLTzhU/CpS6dncnp6dEcjl5w3k4Uo=
+github.com/pilot-protocol/handshake v0.3.0/go.mod h1:g/I0dcp4PKwpQ6toqe4X6G3fuw6P6HmOlAkogHgVicU=
 github.com/pilot-protocol/policy v0.2.3 h1:sonEBL82oGjj1zyMQjJJ5cw+0KQdjS1sgHiLmIVWb8g=
 github.com/pilot-protocol/policy v0.2.3/go.mod h1:ALQdPalluwdzd3AbqbR+iNU5jJc/aG79n9ym0vhhF7w=
 github.com/pilot-protocol/rendezvous v0.2.8 h1:GRJyNplqNrfhPuCUgOAaY5Dg5En4G2aO+W2oCNKuIlo=