diff --git a/Cargo.lock b/Cargo.lock
index 5e591c822..6184e8854 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2986,7 +2986,7 @@ checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
 
 [[package]]
 name = "registry-cli-docs"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "clap",
  "registry-evidence",
@@ -3001,7 +3001,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discovery"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "axum-test",
@@ -3028,7 +3028,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discovery-client"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "base64",
@@ -3060,7 +3060,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discovery-client-node"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "napi",
  "napi-build",
@@ -3073,7 +3073,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discovery-client-py"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "pyo3",
  "pyo3-build-config",
@@ -3086,7 +3086,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discovery-profile"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "registry-platform-canonical-json",
  "serde",
@@ -3098,7 +3098,7 @@ dependencies = [
 
 [[package]]
 name = "registry-discoveryctl"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "clap",
@@ -3123,7 +3123,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "assert-json-diff",
  "async-trait",
@@ -3182,7 +3182,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-authoring"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "anyhow",
  "jsonschema",
@@ -3196,7 +3196,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-client"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "chrono",
@@ -3223,7 +3223,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-client-node"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "chrono",
@@ -3246,7 +3246,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-client-py"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "chrono",
@@ -3269,7 +3269,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-oid4vci"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3306,7 +3306,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidence-verifier"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "chrono",
@@ -3326,7 +3326,7 @@ dependencies = [
 
 [[package]]
 name = "registry-evidencectl"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "anyhow",
  "axum",
@@ -3363,7 +3363,7 @@ dependencies = [
 
 [[package]]
 name = "registry-language-server"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "anyhow",
  "futures",
@@ -3382,7 +3382,7 @@ dependencies = [
 
 [[package]]
 name = "registry-manifest-cli"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "registry-manifest-core",
  "serde",
@@ -3393,7 +3393,7 @@ dependencies = [
 
 [[package]]
 name = "registry-manifest-core"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "oxiri",
  "oxjsonld",
@@ -3408,7 +3408,7 @@ dependencies = [
 
 [[package]]
 name = "registry-mint"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3448,7 +3448,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-audit"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "hmac 0.13.0",
@@ -3470,7 +3470,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-authcommon"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "proptest",
@@ -3487,11 +3487,11 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-buildinfo"
-version = "0.22.0"
+version = "0.23.0"
 
 [[package]]
 name = "registry-platform-canonical-json"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "ryu-js",
  "serde",
@@ -3501,7 +3501,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-config"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "registry-platform-crypto",
@@ -3517,7 +3517,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-crypto"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "aws-lc-rs",
@@ -3543,7 +3543,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-httpsec"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "http",
@@ -3559,7 +3559,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-httputil"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3593,7 +3593,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-oidc"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "base64",
@@ -3609,7 +3609,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-sdjwt"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "base64",
@@ -3627,7 +3627,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-sqlite"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "rusqlite",
  "rustix",
@@ -3640,7 +3640,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-testing"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3663,7 +3663,7 @@ dependencies = [
 
 [[package]]
 name = "registry-relay-client"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3681,7 +3681,7 @@ dependencies = [
 
 [[package]]
 name = "registry-relay-client-node"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "axum",
  "napi",
@@ -3697,7 +3697,7 @@ dependencies = [
 
 [[package]]
 name = "registry-relay-client-py"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "pyo3",
  "pyo3-build-config",
@@ -3712,11 +3712,11 @@ dependencies = [
 
 [[package]]
 name = "registry-relay-http-contract"
-version = "0.22.0"
+version = "0.23.0"
 
 [[package]]
 name = "registry-relay-v2"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "axum",
@@ -3772,7 +3772,7 @@ dependencies = [
 
 [[package]]
 name = "registry-relayctl"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "clap",
  "hex",
diff --git a/Cargo.toml b/Cargo.toml
index 86a1f6aa0..22a0c1497 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -45,7 +45,7 @@ exclude = [
 resolver = "2"
 
 [workspace.package]
-version = "0.22.0"
+version = "0.23.0"
 edition = "2021"
 rust-version = "1.95"
 license = "Apache-2.0"
@@ -56,41 +56,41 @@ repository = "https://github.com/registrystack/registry-stack"
 unsafe_code = "forbid"
 
 [workspace.dependencies]
-registry-discovery = { path = "crates/registry-discovery", version = "0.22.0", default-features = false }
-registry-discovery-client = { path = "crates/registry-discovery-client", version = "0.22.0" }
-registry-discovery-client-node = { path = "crates/registry-discovery-client-node", version = "0.22.0" }
-registry-discovery-client-py = { path = "crates/registry-discovery-client-py", version = "0.22.0" }
-registry-discovery-profile = { path = "crates/registry-discovery-profile", version = "0.22.0" }
-registry-discoveryctl = { path = "crates/registry-discoveryctl", version = "0.22.0" }
-registry-evidence = { path = "crates/registry-evidence", version = "0.22.0" }
-registry-evidence-authoring = { path = "crates/registry-evidence-authoring", version = "0.22.0" }
-registry-evidence-client = { path = "crates/registry-evidence-client", version = "0.22.0" }
-registry-evidence-client-node = { path = "crates/registry-evidence-client-node", version = "0.22.0" }
-registry-evidence-client-py = { path = "crates/registry-evidence-client-py", version = "0.22.0" }
-registry-evidence-oid4vci = { path = "crates/registry-evidence-oid4vci", version = "0.22.0" }
-registry-evidence-verifier = { path = "crates/registry-evidence-verifier", version = "0.22.0" }
-registry-evidencectl = { path = "crates/registry-evidencectl", version = "0.22.0" }
-registry-language-server = { path = "crates/registry-language-server", version = "0.22.0" }
-registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.22.0" }
-registry-mint = { path = "crates/registry-mint", version = "0.22.0" }
-registry-relay-http-contract = { path = "crates/registry-relay-http-contract", version = "0.22.0" }
-registry-relay-client = { path = "crates/registry-relay-client", version = "0.22.0" }
-registry-relay-client-node = { path = "crates/registry-relay-client-node", version = "0.22.0" }
-registry-relay-client-py = { path = "crates/registry-relay-client-py", version = "0.22.0" }
-registry-relay-v2 = { path = "crates/registry-relay-v2", version = "0.22.0" }
-registry-relayctl = { path = "crates/registry-relayctl", version = "0.22.0" }
-registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.22.0" }
-registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.22.0" }
-registry-platform-buildinfo = { path = "crates/registry-platform-buildinfo", version = "0.22.0" }
-registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.22.0" }
-registry-platform-config = { path = "crates/registry-platform-config", version = "0.22.0" }
-registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.22.0" }
-registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.22.0", default-features = false }
-registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.22.0" }
-registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.22.0" }
-registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.22.0" }
-registry-platform-sqlite = { path = "crates/registry-platform-sqlite", version = "0.22.0" }
-registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.22.0" }
+registry-discovery = { path = "crates/registry-discovery", version = "0.23.0", default-features = false }
+registry-discovery-client = { path = "crates/registry-discovery-client", version = "0.23.0" }
+registry-discovery-client-node = { path = "crates/registry-discovery-client-node", version = "0.23.0" }
+registry-discovery-client-py = { path = "crates/registry-discovery-client-py", version = "0.23.0" }
+registry-discovery-profile = { path = "crates/registry-discovery-profile", version = "0.23.0" }
+registry-discoveryctl = { path = "crates/registry-discoveryctl", version = "0.23.0" }
+registry-evidence = { path = "crates/registry-evidence", version = "0.23.0" }
+registry-evidence-authoring = { path = "crates/registry-evidence-authoring", version = "0.23.0" }
+registry-evidence-client = { path = "crates/registry-evidence-client", version = "0.23.0" }
+registry-evidence-client-node = { path = "crates/registry-evidence-client-node", version = "0.23.0" }
+registry-evidence-client-py = { path = "crates/registry-evidence-client-py", version = "0.23.0" }
+registry-evidence-oid4vci = { path = "crates/registry-evidence-oid4vci", version = "0.23.0" }
+registry-evidence-verifier = { path = "crates/registry-evidence-verifier", version = "0.23.0" }
+registry-evidencectl = { path = "crates/registry-evidencectl", version = "0.23.0" }
+registry-language-server = { path = "crates/registry-language-server", version = "0.23.0" }
+registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.23.0" }
+registry-mint = { path = "crates/registry-mint", version = "0.23.0" }
+registry-relay-http-contract = { path = "crates/registry-relay-http-contract", version = "0.23.0" }
+registry-relay-client = { path = "crates/registry-relay-client", version = "0.23.0" }
+registry-relay-client-node = { path = "crates/registry-relay-client-node", version = "0.23.0" }
+registry-relay-client-py = { path = "crates/registry-relay-client-py", version = "0.23.0" }
+registry-relay-v2 = { path = "crates/registry-relay-v2", version = "0.23.0" }
+registry-relayctl = { path = "crates/registry-relayctl", version = "0.23.0" }
+registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.23.0" }
+registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.23.0" }
+registry-platform-buildinfo = { path = "crates/registry-platform-buildinfo", version = "0.23.0" }
+registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.23.0" }
+registry-platform-config = { path = "crates/registry-platform-config", version = "0.23.0" }
+registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.23.0" }
+registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.23.0", default-features = false }
+registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.23.0" }
+registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.23.0" }
+registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.23.0" }
+registry-platform-sqlite = { path = "crates/registry-platform-sqlite", version = "0.23.0" }
+registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.23.0" }
 
 anyhow = { version = "1" }
 assert-json-diff = { version = "2" }
diff --git a/crates/registry-discovery-client-node/index.js b/crates/registry-discovery-client-node/index.js
index 91f4c95d2..092e47e0c 100644
--- a/crates/registry-discovery-client-node/index.js
+++ b/crates/registry-discovery-client-node/index.js
@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-android-arm64')
         const bindingPackageVersion = require('@registrystack/discovery-client-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-android-arm-eabi')
         const bindingPackageVersion = require('@registrystack/discovery-client-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-win32-x64-gnu')
         const bindingPackageVersion = require('@registrystack/discovery-client-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-win32-x64-msvc')
         const bindingPackageVersion = require('@registrystack/discovery-client-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-win32-ia32-msvc')
         const bindingPackageVersion = require('@registrystack/discovery-client-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-win32-arm64-msvc')
         const bindingPackageVersion = require('@registrystack/discovery-client-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@registrystack/discovery-client-darwin-universal')
       const bindingPackageVersion = require('@registrystack/discovery-client-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-darwin-x64')
         const bindingPackageVersion = require('@registrystack/discovery-client-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-darwin-arm64')
         const bindingPackageVersion = require('@registrystack/discovery-client-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-freebsd-x64')
         const bindingPackageVersion = require('@registrystack/discovery-client-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-freebsd-arm64')
         const bindingPackageVersion = require('@registrystack/discovery-client-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-x64-musl')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-x64-gnu')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-arm64-musl')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-arm64-gnu')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-arm-musleabihf')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-loong64-musl')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-loong64-gnu')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-riscv64-musl')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/discovery-client-linux-riscv64-gnu')
           const bindingPackageVersion = require('@registrystack/discovery-client-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-linux-ppc64-gnu')
         const bindingPackageVersion = require('@registrystack/discovery-client-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-linux-s390x-gnu')
         const bindingPackageVersion = require('@registrystack/discovery-client-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-openharmony-arm64')
         const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-openharmony-x64')
         const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/discovery-client-openharmony-arm')
         const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@registrystack/discovery-client-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '0.22.0') {
-            throw new Error(`WASI binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0') {
+            throw new Error(`WASI binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@registrystack/discovery-client-wasm32-wasi')
diff --git a/crates/registry-discovery-client-node/npm/darwin-arm64/package.json b/crates/registry-discovery-client-node/npm/darwin-arm64/package.json
index b353e0d17..9e035bf67 100644
--- a/crates/registry-discovery-client-node/npm/darwin-arm64/package.json
+++ b/crates/registry-discovery-client-node/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/discovery-client-darwin-arm64",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["arm64"],
   "main": "discovery-client.darwin-arm64.node",
   "files": ["discovery-client.darwin-arm64.node"],
diff --git a/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json
index 3364d6e83..5bd2126fa 100644
--- a/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json
+++ b/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/discovery-client-linux-arm64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["arm64"],
   "main": "discovery-client.linux-arm64-gnu.node",
   "files": ["discovery-client.linux-arm64-gnu.node"],
diff --git a/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json b/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json
index 09135cf1c..0d6907a05 100644
--- a/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json
+++ b/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/discovery-client-linux-x64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["x64"],
   "main": "discovery-client.linux-x64-gnu.node",
   "files": ["discovery-client.linux-x64-gnu.node"],
diff --git a/crates/registry-discovery-client-node/package-lock.json b/crates/registry-discovery-client-node/package-lock.json
index 535fb2d3a..b68efe668 100644
--- a/crates/registry-discovery-client-node/package-lock.json
+++ b/crates/registry-discovery-client-node/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@registrystack/discovery-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@registrystack/discovery-client",
-      "version": "0.22.0",
+      "version": "0.23.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@napi-rs/cli": "3.8.2",
@@ -17,9 +17,9 @@
         "node": ">=22.12.0"
       },
       "optionalDependencies": {
-        "@registrystack/discovery-client-darwin-arm64": "0.22.0",
-        "@registrystack/discovery-client-linux-arm64-gnu": "0.22.0",
-        "@registrystack/discovery-client-linux-x64-gnu": "0.22.0"
+        "@registrystack/discovery-client-darwin-arm64": "0.23.0",
+        "@registrystack/discovery-client-linux-arm64-gnu": "0.23.0",
+        "@registrystack/discovery-client-linux-x64-gnu": "0.23.0"
       }
     },
     "node_modules/@emnapi/core": {
@@ -34,18 +34,6 @@
         "tslib": "^2.4.0"
       }
     },
-    "node_modules/@emnapi/runtime": {
-      "version": "2.0.0-alpha.3",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-2.0.0-alpha.3.tgz",
-      "integrity": "sha512-hFPAhMUjJD9BSyCANEISPOogeXC9Zo9ZQl7L6vKnaVsMkCtzznaW/naYypeyl0Gv5rYfWYsZbpixTMpjDJzQeA==",
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "peer": true,
-      "dependencies": {
-        "tslib": "^2.4.0"
-      }
-    },
     "node_modules/@emnapi/wasi-threads": {
       "version": "1.2.2",
       "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.2.tgz",
@@ -1700,6 +1688,15 @@
         "@octokit/openapi-types": "^28.0.0"
       }
     },
+    "node_modules/@registrystack/discovery-client-darwin-arm64": {
+      "optional": true
+    },
+    "node_modules/@registrystack/discovery-client-linux-arm64-gnu": {
+      "optional": true
+    },
+    "node_modules/@registrystack/discovery-client-linux-x64-gnu": {
+      "optional": true
+    },
     "node_modules/@tybys/wasm-util": {
       "version": "0.10.3",
       "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.3.tgz",
diff --git a/crates/registry-discovery-client-node/package.json b/crates/registry-discovery-client-node/package.json
index afba6f3ed..35ea37d6d 100644
--- a/crates/registry-discovery-client-node/package.json
+++ b/crates/registry-discovery-client-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/discovery-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Node.js binding for the Registry Discovery client, via napi-rs.",
   "license": "Apache-2.0",
   "publishConfig": { "access": "public", "provenance": true },
@@ -31,8 +31,8 @@
     "typescript": "6.0.3"
   },
   "optionalDependencies": {
-    "@registrystack/discovery-client-darwin-arm64": "0.22.0",
-    "@registrystack/discovery-client-linux-arm64-gnu": "0.22.0",
-    "@registrystack/discovery-client-linux-x64-gnu": "0.22.0"
+    "@registrystack/discovery-client-darwin-arm64": "0.23.0",
+    "@registrystack/discovery-client-linux-arm64-gnu": "0.23.0",
+    "@registrystack/discovery-client-linux-x64-gnu": "0.23.0"
   }
 }
diff --git a/crates/registry-discovery-client-py/Cargo.toml b/crates/registry-discovery-client-py/Cargo.toml
index 5264796fb..04bf4c459 100644
--- a/crates/registry-discovery-client-py/Cargo.toml
+++ b/crates/registry-discovery-client-py/Cargo.toml
@@ -19,7 +19,7 @@ workspace = true
 extension-module = ["pyo3/extension-module"]
 
 [dependencies]
-discovery-client-sdk = { package = "registry-discovery-client", path = "../registry-discovery-client", version = "0.22.0" }
+discovery-client-sdk = { package = "registry-discovery-client", path = "../registry-discovery-client", version = "0.23.0" }
 pyo3.workspace = true
 serde.workspace = true
 serde_json.workspace = true
diff --git a/crates/registry-discovery-client-py/pyproject.toml b/crates/registry-discovery-client-py/pyproject.toml
index de5a0715b..db181564c 100644
--- a/crates/registry-discovery-client-py/pyproject.toml
+++ b/crates/registry-discovery-client-py/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "registry-discovery-client"
-version = "0.22.0"
+version = "0.23.0"
 description = "Python binding for the Registry Discovery client, via PyO3."
 readme = "README.md"
 license = { text = "Apache-2.0" }
diff --git a/crates/registry-evidence-client-node/index.js b/crates/registry-evidence-client-node/index.js
index fa73ea0f5..f0ce99c2a 100644
--- a/crates/registry-evidence-client-node/index.js
+++ b/crates/registry-evidence-client-node/index.js
@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-android-arm64')
         const bindingPackageVersion = require('@registrystack/evidence-client-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-android-arm-eabi')
         const bindingPackageVersion = require('@registrystack/evidence-client-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-win32-x64-gnu')
         const bindingPackageVersion = require('@registrystack/evidence-client-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-win32-x64-msvc')
         const bindingPackageVersion = require('@registrystack/evidence-client-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-win32-ia32-msvc')
         const bindingPackageVersion = require('@registrystack/evidence-client-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-win32-arm64-msvc')
         const bindingPackageVersion = require('@registrystack/evidence-client-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@registrystack/evidence-client-darwin-universal')
       const bindingPackageVersion = require('@registrystack/evidence-client-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-darwin-x64')
         const bindingPackageVersion = require('@registrystack/evidence-client-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-darwin-arm64')
         const bindingPackageVersion = require('@registrystack/evidence-client-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-freebsd-x64')
         const bindingPackageVersion = require('@registrystack/evidence-client-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-freebsd-arm64')
         const bindingPackageVersion = require('@registrystack/evidence-client-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-x64-musl')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-x64-gnu')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-arm64-musl')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-arm64-gnu')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-arm-musleabihf')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-loong64-musl')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-loong64-gnu')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-riscv64-musl')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/evidence-client-linux-riscv64-gnu')
           const bindingPackageVersion = require('@registrystack/evidence-client-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-linux-ppc64-gnu')
         const bindingPackageVersion = require('@registrystack/evidence-client-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-linux-s390x-gnu')
         const bindingPackageVersion = require('@registrystack/evidence-client-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-openharmony-arm64')
         const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-openharmony-x64')
         const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/evidence-client-openharmony-arm')
         const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@registrystack/evidence-client-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '0.22.0') {
-            throw new Error(`WASI binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0') {
+            throw new Error(`WASI binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@registrystack/evidence-client-wasm32-wasi')
diff --git a/crates/registry-evidence-client-node/npm/darwin-arm64/package.json b/crates/registry-evidence-client-node/npm/darwin-arm64/package.json
index 70747183a..4da85e1ea 100644
--- a/crates/registry-evidence-client-node/npm/darwin-arm64/package.json
+++ b/crates/registry-evidence-client-node/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/evidence-client-darwin-arm64",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["arm64"],
   "main": "evidence-client.darwin-arm64.node",
   "files": ["evidence-client.darwin-arm64.node"],
diff --git a/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json
index 5c64485f1..24f5f0c35 100644
--- a/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json
+++ b/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/evidence-client-linux-arm64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["arm64"],
   "main": "evidence-client.linux-arm64-gnu.node",
   "files": ["evidence-client.linux-arm64-gnu.node"],
diff --git a/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json b/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json
index 803d2124b..60fc4f335 100644
--- a/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json
+++ b/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/evidence-client-linux-x64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": ["x64"],
   "main": "evidence-client.linux-x64-gnu.node",
   "files": ["evidence-client.linux-x64-gnu.node"],
diff --git a/crates/registry-evidence-client-node/package-lock.json b/crates/registry-evidence-client-node/package-lock.json
index 5072324f9..402261a55 100644
--- a/crates/registry-evidence-client-node/package-lock.json
+++ b/crates/registry-evidence-client-node/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@registrystack/evidence-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@registrystack/evidence-client",
-      "version": "0.22.0",
+      "version": "0.23.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@napi-rs/cli": "3.8.2"
@@ -15,9 +15,9 @@
         "node": ">=22.12.0"
       },
       "optionalDependencies": {
-        "@registrystack/evidence-client-darwin-arm64": "0.22.0",
-        "@registrystack/evidence-client-linux-arm64-gnu": "0.22.0",
-        "@registrystack/evidence-client-linux-x64-gnu": "0.22.0"
+        "@registrystack/evidence-client-darwin-arm64": "0.23.0",
+        "@registrystack/evidence-client-linux-arm64-gnu": "0.23.0",
+        "@registrystack/evidence-client-linux-x64-gnu": "0.23.0"
       }
     },
     "node_modules/@emnapi/core": {
@@ -1655,52 +1655,13 @@
       }
     },
     "node_modules/@registrystack/evidence-client-darwin-arm64": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/evidence-client-darwin-arm64/-/evidence-client-darwin-arm64-0.22.0.tgz",
-      "integrity": "sha512-SIWSX+s8x8PoLhB3SuGjpD/pA6Kz3on4TWCbyIfdBhY1Ca1e0j8FbqKm1P0Rp5WWByOzAWYaXLWpsohYwxMAlQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@registrystack/evidence-client-linux-arm64-gnu": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/evidence-client-linux-arm64-gnu/-/evidence-client-linux-arm64-gnu-0.22.0.tgz",
-      "integrity": "sha512-NZEzR1KuxgXAf7IYywX2UmOlh1gBfRziMrycNm59QjR2juQesYnO90xFmh/N8kqUei1tFRfbr8WMsKmoX/rbbg==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@registrystack/evidence-client-linux-x64-gnu": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/evidence-client-linux-x64-gnu/-/evidence-client-linux-x64-gnu-0.22.0.tgz",
-      "integrity": "sha512-Gu60sM5p7BwXXnJIgUzNaT57lWOAcjLVxeLg+qAGU6FBhhKY/6Uao+2C1nFZfT18FyLb8+rP86c7ms/0m6qDMA==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@tybys/wasm-util": {
       "version": "0.10.3",
diff --git a/crates/registry-evidence-client-node/package.json b/crates/registry-evidence-client-node/package.json
index 8023c71d5..84a3b6666 100644
--- a/crates/registry-evidence-client-node/package.json
+++ b/crates/registry-evidence-client-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/evidence-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Node.js binding for the Evidence relying-party client, via napi-rs.",
   "license": "Apache-2.0",
   "publishConfig": { "access": "public", "provenance": true },
@@ -44,8 +44,8 @@
     "@napi-rs/cli": "3.8.2"
   },
   "optionalDependencies": {
-    "@registrystack/evidence-client-darwin-arm64": "0.22.0",
-    "@registrystack/evidence-client-linux-arm64-gnu": "0.22.0",
-    "@registrystack/evidence-client-linux-x64-gnu": "0.22.0"
+    "@registrystack/evidence-client-darwin-arm64": "0.23.0",
+    "@registrystack/evidence-client-linux-arm64-gnu": "0.23.0",
+    "@registrystack/evidence-client-linux-x64-gnu": "0.23.0"
   }
 }
diff --git a/crates/registry-evidence-client-py/Cargo.toml b/crates/registry-evidence-client-py/Cargo.toml
index 89cbf02c5..5fc0eedd9 100644
--- a/crates/registry-evidence-client-py/Cargo.toml
+++ b/crates/registry-evidence-client-py/Cargo.toml
@@ -29,7 +29,7 @@ chrono.workspace = true
 # multiple candidates for rmeta dependency`, which no `use` path syntax can
 # resolve). One consistent alias, used everywhere this crate reaches the SDK,
 # avoids that rather than special-casing test code against production code.
-evidence-client-sdk = { package = "registry-evidence-client", path = "../registry-evidence-client", version = "0.22.0" }
+evidence-client-sdk = { package = "registry-evidence-client", path = "../registry-evidence-client", version = "0.23.0" }
 pyo3.workspace = true
 registry-platform-crypto.workspace = true
 serde_json.workspace = true
diff --git a/crates/registry-evidence-client-py/pyproject.toml b/crates/registry-evidence-client-py/pyproject.toml
index 435a194af..8a082fc20 100644
--- a/crates/registry-evidence-client-py/pyproject.toml
+++ b/crates/registry-evidence-client-py/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "registry-evidence-client"
-version = "0.22.0"
+version = "0.23.0"
 description = "Python binding for the Evidence relying-party client, via PyO3."
 readme = "README.md"
 license = { text = "Apache-2.0" }
diff --git a/crates/registry-relay-client-node/index.js b/crates/registry-relay-client-node/index.js
index 07fee6ade..9071b4dfa 100644
--- a/crates/registry-relay-client-node/index.js
+++ b/crates/registry-relay-client-node/index.js
@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-android-arm64')
         const bindingPackageVersion = require('@registrystack/relay-client-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-android-arm-eabi')
         const bindingPackageVersion = require('@registrystack/relay-client-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-win32-x64-gnu')
         const bindingPackageVersion = require('@registrystack/relay-client-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-win32-x64-msvc')
         const bindingPackageVersion = require('@registrystack/relay-client-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-win32-ia32-msvc')
         const bindingPackageVersion = require('@registrystack/relay-client-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-win32-arm64-msvc')
         const bindingPackageVersion = require('@registrystack/relay-client-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('@registrystack/relay-client-darwin-universal')
       const bindingPackageVersion = require('@registrystack/relay-client-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-darwin-x64')
         const bindingPackageVersion = require('@registrystack/relay-client-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-darwin-arm64')
         const bindingPackageVersion = require('@registrystack/relay-client-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-freebsd-x64')
         const bindingPackageVersion = require('@registrystack/relay-client-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-freebsd-arm64')
         const bindingPackageVersion = require('@registrystack/relay-client-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-x64-musl')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-x64-gnu')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-arm64-musl')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-arm64-gnu')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-arm-musleabihf')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-loong64-musl')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-loong64-gnu')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-riscv64-musl')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('@registrystack/relay-client-linux-riscv64-gnu')
           const bindingPackageVersion = require('@registrystack/relay-client-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-linux-ppc64-gnu')
         const bindingPackageVersion = require('@registrystack/relay-client-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-linux-s390x-gnu')
         const bindingPackageVersion = require('@registrystack/relay-client-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-openharmony-arm64')
         const bindingPackageVersion = require('@registrystack/relay-client-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-openharmony-x64')
         const bindingPackageVersion = require('@registrystack/relay-client-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('@registrystack/relay-client-openharmony-arm')
         const bindingPackageVersion = require('@registrystack/relay-client-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.22.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.23.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@registrystack/relay-client-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '0.22.0') {
-            throw new Error(`WASI binding package version mismatch, expected 0.22.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.23.0') {
+            throw new Error(`WASI binding package version mismatch, expected 0.23.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@registrystack/relay-client-wasm32-wasi')
diff --git a/crates/registry-relay-client-node/npm/darwin-arm64/package.json b/crates/registry-relay-client-node/npm/darwin-arm64/package.json
index a79c8bffc..705fd060d 100644
--- a/crates/registry-relay-client-node/npm/darwin-arm64/package.json
+++ b/crates/registry-relay-client-node/npm/darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/relay-client-darwin-arm64",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": [
     "arm64"
   ],
diff --git a/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json
index a56bcd8a1..02d680c09 100644
--- a/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json
+++ b/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/relay-client-linux-arm64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": [
     "arm64"
   ],
diff --git a/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json b/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json
index 9485cfbd5..320094e53 100644
--- a/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json
+++ b/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/relay-client-linux-x64-gnu",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "cpu": [
     "x64"
   ],
diff --git a/crates/registry-relay-client-node/package-lock.json b/crates/registry-relay-client-node/package-lock.json
index ac94298a2..8aa394f78 100644
--- a/crates/registry-relay-client-node/package-lock.json
+++ b/crates/registry-relay-client-node/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@registrystack/relay-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@registrystack/relay-client",
-      "version": "0.22.0",
+      "version": "0.23.0",
       "license": "Apache-2.0",
       "devDependencies": {
         "@napi-rs/cli": "3.8.2",
@@ -17,9 +17,9 @@
         "node": ">=22.12.0"
       },
       "optionalDependencies": {
-        "@registrystack/relay-client-darwin-arm64": "0.22.0",
-        "@registrystack/relay-client-linux-arm64-gnu": "0.22.0",
-        "@registrystack/relay-client-linux-x64-gnu": "0.22.0"
+        "@registrystack/relay-client-darwin-arm64": "0.23.0",
+        "@registrystack/relay-client-linux-arm64-gnu": "0.23.0",
+        "@registrystack/relay-client-linux-x64-gnu": "0.23.0"
       }
     },
     "node_modules/@emnapi/core": {
@@ -1657,52 +1657,13 @@
       }
     },
     "node_modules/@registrystack/relay-client-darwin-arm64": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/relay-client-darwin-arm64/-/relay-client-darwin-arm64-0.22.0.tgz",
-      "integrity": "sha512-02aFSExhl7VUxDEdFTh/5Zbydda+hRW1ozorgk0Jo0/tCE5cb5H1SoK5HfG1VJJLny2Lf8NgMn5CMCcBMHNHPw==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@registrystack/relay-client-linux-arm64-gnu": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/relay-client-linux-arm64-gnu/-/relay-client-linux-arm64-gnu-0.22.0.tgz",
-      "integrity": "sha512-ZHAWgt+hdEIE4sU1+ZUp4swqpcEEAQi1aA4WPJkuQ40aAEpGfMkZOyNjAgVeKltQrKMu1Z9yxIhiScq0Icap3g==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@registrystack/relay-client-linux-x64-gnu": {
-      "version": "0.22.0",
-      "resolved": "https://registry.npmjs.org/@registrystack/relay-client-linux-x64-gnu/-/relay-client-linux-x64-gnu-0.22.0.tgz",
-      "integrity": "sha512-4w0z4fEseLjWIA+PIH33Z6Je/uibadq6+DmJ27eymSIfxVP65fFmBB/8v4tpGZWT/KHrxiYGEJvDN2UIiTVEPg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=22.12.0"
-      }
+      "optional": true
     },
     "node_modules/@tybys/wasm-util": {
       "version": "0.10.3",
diff --git a/crates/registry-relay-client-node/package.json b/crates/registry-relay-client-node/package.json
index 4b88e2c50..7f470d33b 100644
--- a/crates/registry-relay-client-node/package.json
+++ b/crates/registry-relay-client-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@registrystack/relay-client",
-  "version": "0.22.0",
+  "version": "0.23.0",
   "description": "Node.js binding for the Registry Relay V2 client, via napi-rs.",
   "license": "Apache-2.0",
   "publishConfig": { "access": "public", "provenance": true },
@@ -30,8 +30,8 @@
     "typescript": "6.0.3"
   },
   "optionalDependencies": {
-    "@registrystack/relay-client-darwin-arm64": "0.22.0",
-    "@registrystack/relay-client-linux-arm64-gnu": "0.22.0",
-    "@registrystack/relay-client-linux-x64-gnu": "0.22.0"
+    "@registrystack/relay-client-darwin-arm64": "0.23.0",
+    "@registrystack/relay-client-linux-arm64-gnu": "0.23.0",
+    "@registrystack/relay-client-linux-x64-gnu": "0.23.0"
   }
 }
diff --git a/crates/registry-relay-client-py/Cargo.toml b/crates/registry-relay-client-py/Cargo.toml
index 498a0d17d..435a05d06 100644
--- a/crates/registry-relay-client-py/Cargo.toml
+++ b/crates/registry-relay-client-py/Cargo.toml
@@ -21,7 +21,7 @@ extension-module = ["pyo3/extension-module"]
 [dependencies]
 pyo3.workspace = true
 registry-platform-crypto.workspace = true
-relay-client-sdk = { package = "registry-relay-client", path = "../registry-relay-client", version = "0.22.0" }
+relay-client-sdk = { package = "registry-relay-client", path = "../registry-relay-client", version = "0.23.0" }
 serde.workspace = true
 serde_json.workspace = true
 tokio.workspace = true
diff --git a/crates/registry-relay-client-py/pyproject.toml b/crates/registry-relay-client-py/pyproject.toml
index 43798c68c..f98c0753a 100644
--- a/crates/registry-relay-client-py/pyproject.toml
+++ b/crates/registry-relay-client-py/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "registry-relay-client"
-version = "0.22.0"
+version = "0.23.0"
 description = "Python binding for the Registry Relay V2 client, via PyO3."
 readme = "README.md"
 license = { text = "Apache-2.0" }
diff --git a/docs/site/scripts/deployment-documentation-truth.test.mjs b/docs/site/scripts/deployment-documentation-truth.test.mjs
index 77d95bc0d..e09f14b9c 100644
--- a/docs/site/scripts/deployment-documentation-truth.test.mjs
+++ b/docs/site/scripts/deployment-documentation-truth.test.mjs
@@ -96,7 +96,7 @@ test('current docs stay under /dev/ while v0.15.2 remains the released archive',
     }
     assert.equal(docset.status, 'archived', `${docset.id} must expose its release-train status`);
     const expectedAvailability =
-      ['v0.22.0', 'v0.21.0', 'v0.20.1', 'v0.20.0', 'v0.18.0', 'v0.17.0', 'v0.16.3', 'v0.15.1', 'v0.15.0'].includes(docset.id)
+      ['v0.23.0', 'v0.22.0', 'v0.21.0', 'v0.20.1', 'v0.20.0', 'v0.18.0', 'v0.17.0', 'v0.16.3', 'v0.15.1', 'v0.15.0'].includes(docset.id)
         ? 'candidate'
         : docset.id.startsWith('v')
           ? 'released'
diff --git a/docs/site/scripts/notary-retirement.test.mjs b/docs/site/scripts/notary-retirement.test.mjs
index 5c8fbabfa..157a3f8c3 100644
--- a/docs/site/scripts/notary-retirement.test.mjs
+++ b/docs/site/scripts/notary-retirement.test.mjs
@@ -71,7 +71,7 @@ test('removes the current Notary docs sources and generated product plumbing', (
   const historicalNotaryDocsets = docsets.docsets.filter(
     (entry) =>
       entry.status === 'archived' &&
-      !['v0.17.0', 'v0.18.0', 'v0.20.0', 'v0.20.1', 'v0.21.0', 'v0.22.0'].includes(entry.id),
+      !['v0.17.0', 'v0.18.0', 'v0.20.0', 'v0.20.1', 'v0.21.0', 'v0.22.0', 'v0.23.0'].includes(entry.id),
   );
   for (const docset of historicalNotaryDocsets) {
     assert.ok(docset.products['registry-notary'], `${docset.id} lost its historical Notary pin`);
diff --git a/docs/site/src/content/docs/changelog.mdx b/docs/site/src/content/docs/changelog.mdx
index fc6a34466..7c6b543de 100644
--- a/docs/site/src/content/docs/changelog.mdx
+++ b/docs/site/src/content/docs/changelog.mdx
@@ -18,6 +18,29 @@ relevant product pages on this site rather than duplicating release notes.
 
 ## Unreleased
 
+## 2026-08-20
+
+Documentation prepared for the v0.23.0 beta-34 release:
+
+- Documented Registry Discovery: the curated, read-only index of public
+  Evidence and Relay service descriptions, the closed
+  `registry-discovery-v1alpha1` provider profile, the bounded relying-party
+  search and ambiguity-safe selection, and the `discoveryctl` operator flow.
+- Documented that a Discovery selection is inert public metadata, not a trust
+  decision and not a native request.
+- Documented the npm and PyPI distribution of the Registry Discovery client
+  package alongside the existing Evidence and Relay clients.
+- Documented the progressive Evidence client API across the Node and Python
+  bindings and the synchronized client tutorial paths.
+- Documented `relayctl`'s human-readable default output and the unchanged
+  `--json` report document.
+- Reorganized the sidebar by what a reader came to do, published two tutorials,
+  and retired the duplicate chooser page.
+- Rewrote the style guide for readers rather than runners, and stopped printing
+  values a reader cannot reproduce, such as compiled contract revisions and
+  installation-dependent counts.
+- Added the v0.23.0 beta-34 candidate documentation archive.
+
 ## 2026-08-14
 
 Documentation prepared for the v0.22.0 beta-33 release:
diff --git a/docs/site/src/content/docs/reference/cli/evidence-oid4vci.mdx b/docs/site/src/content/docs/reference/cli/evidence-oid4vci.mdx
index 2972b16bf..0639041ad 100644
--- a/docs/site/src/content/docs/reference/cli/evidence-oid4vci.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence-oid4vci.mdx
@@ -18,7 +18,7 @@ Registry Stack wallet delivery front end for Evidence credentials.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/check.mdx b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/check.mdx
index a9a17786c..21b573028 100644
--- a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/check.mdx
@@ -18,7 +18,7 @@ Load and validate the configuration and the client key, then exit.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/inspect.mdx b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/inspect.mdx
index ad475fc7b..63af515d5 100644
--- a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/inspect.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/inspect.mdx
@@ -18,7 +18,7 @@ Validate the deployment and print its derived protocol metadata.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/openapi.mdx b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/openapi.mdx
index 7f9d47902..1f41dd773 100644
--- a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/openapi.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/openapi.mdx
@@ -18,7 +18,7 @@ Render the deterministic OpenAPI 3.1 contract, then exit.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/serve.mdx b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/serve.mdx
index 7a18f432f..9b2bf131a 100644
--- a/docs/site/src/content/docs/reference/cli/evidence-oid4vci/serve.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence-oid4vci/serve.mdx
@@ -18,7 +18,7 @@ Serve the delivery endpoints until terminated.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence.mdx b/docs/site/src/content/docs/reference/cli/evidence.mdx
index b2bd57b30..d744558c1 100644
--- a/docs/site/src/content/docs/reference/cli/evidence.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence.mdx
@@ -18,7 +18,7 @@ Evidence Gateway Version 1.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/check.mdx b/docs/site/src/content/docs/reference/cli/evidence/check.mdx
index 7d63c9302..c3f34148e 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/check.mdx
@@ -18,7 +18,7 @@ Validate and compile the complete immutable bundle, and validate the mounted sec
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/evaluate.mdx b/docs/site/src/content/docs/reference/cli/evidence/evaluate.mdx
index 747e6ff33..3faf2e69c 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/evaluate.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/evaluate.mdx
@@ -18,7 +18,7 @@ Evaluate one bundle-owned fixture without source or credential access.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/serve.mdx b/docs/site/src/content/docs/reference/cli/evidence/serve.mdx
index 5e61e02b0..c48d07559 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/serve.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/serve.mdx
@@ -18,7 +18,7 @@ Start the native Evidence Gateway HTTP service.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/verify-audit.mdx b/docs/site/src/content/docs/reference/cli/evidence/verify-audit.mdx
index ba099e276..688f0feea 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/verify-audit.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/verify-audit.mdx
@@ -18,7 +18,7 @@ Run a full out-of-band verification pass over the audit chain.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Description
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/verify-presentation.mdx b/docs/site/src/content/docs/reference/cli/evidence/verify-presentation.mdx
index b9c397be0..dc00cae49 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/verify-presentation.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/verify-presentation.mdx
@@ -18,7 +18,7 @@ Re-verify one stored holder-bound presentation offline against a pinned key set.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Description
 
diff --git a/docs/site/src/content/docs/reference/cli/evidence/verify.mdx b/docs/site/src/content/docs/reference/cli/evidence/verify.mdx
index 4015e754c..4eb9e01f3 100644
--- a/docs/site/src/content/docs/reference/cli/evidence/verify.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidence/verify.mdx
@@ -18,7 +18,7 @@ Re-verify one stored signed response offline against a pinned key set.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Description
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl.mdx b/docs/site/src/content/docs/reference/cli/evidencectl.mdx
index 8ea1b8200..0eec71b7f 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl.mdx
@@ -18,7 +18,7 @@ Evidence adopter tooling: keys, source authoring, fixture runs.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access.mdx
index 240f3c2e0..f124d2071 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access.mdx
@@ -18,7 +18,7 @@ Manage local caller access policies and clients.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/client.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/client.mdx
index 472c0c00f..2baa994b4 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/client.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/client.mdx
@@ -18,7 +18,7 @@ Register and revoke local Evidence Gateway clients.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/add.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/add.mdx
index 001b3efa0..7d1e92846 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/add.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/add.mdx
@@ -18,7 +18,7 @@ Add one local client and generate its private key.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/list.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/list.mdx
index 58e68d2da..4486d7919 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/list.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/list.mdx
@@ -18,7 +18,7 @@ List local clients and their policy membership.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/revoke.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/revoke.mdx
index c73a97811..6e3a2bbdf 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/client/revoke.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/client/revoke.mdx
@@ -18,7 +18,7 @@ Revoke one local client.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy.mdx
index 2e0cb8f3d..b374d45da 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy.mdx
@@ -18,7 +18,7 @@ Define which authored questions a policy may request.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/add.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/add.mdx
index 7d4f72653..fe98c1c1c 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/add.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/add.mdx
@@ -18,7 +18,7 @@ Add one governed access policy.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/list.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/list.mdx
index d6f4c2374..28f72a906 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/list.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/access/policy/list.mdx
@@ -18,7 +18,7 @@ List governed access policies.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/audit.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/audit.mdx
index cb767de41..5ac382366 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/audit.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/audit.mdx
@@ -18,7 +18,7 @@ Inspect stopped local audit history.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/audit/show.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/audit/show.mdx
index 5fad11a47..2b6358ab8 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/audit/show.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/audit/show.mdx
@@ -18,7 +18,7 @@ Show a minimized view of stopped local audit history.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/build.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/build.mdx
index 32ab622e6..b12b7d5cc 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/build.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/build.mdx
@@ -18,7 +18,7 @@ Compile an editable project into a reviewed deployment candidate.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/client.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/client.mdx
index d76849619..fac7ab21c 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/client.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/client.mdx
@@ -18,7 +18,7 @@ Configure progressive relying-party clients and fetch contract candidates.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts.mdx
index 7be9c255a..bfec05265 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts.mdx
@@ -18,7 +18,7 @@ Fetch requester-scoped contract candidates for review.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts/fetch.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts/fetch.mdx
index 3a2c8df96..96bc6417f 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts/fetch.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/client/contracts/fetch.mdx
@@ -18,7 +18,7 @@ Fetch a closed requester-scoped contract candidate.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/client/profile.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/client/profile.mdx
index 4eebd9e3c..ecd7a2825 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/client/profile.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/client/profile.mdx
@@ -18,7 +18,7 @@ Create and inspect relying-party client profiles.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/client/profile/create.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/client/profile/create.mdx
index a68a68789..3ae662409 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/client/profile/create.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/client/profile/create.mdx
@@ -18,7 +18,7 @@ Create a strict profile containing only references to local key material.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/dev.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/dev.mdx
index e6196aa1e..44250528d 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/dev.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/dev.mdx
@@ -18,7 +18,7 @@ Run the private local Registry Mint and Evidence Gateway pair.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/dev/clean.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/dev/clean.mdx
index d0405cfa2..2b2453b07 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/dev/clean.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/dev/clean.mdx
@@ -18,7 +18,7 @@ Remove one completed stopped local generation.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/dev/stop.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/dev/stop.mdx
index d2028626c..3c24a0321 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/dev/stop.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/dev/stop.mdx
@@ -18,7 +18,7 @@ Stop the active local Registry Mint and Evidence Gateway pair.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/doctor.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/doctor.mdx
index d8fcda3a6..d3b6f5751 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/doctor.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/doctor.mdx
@@ -18,7 +18,7 @@ Report every project artifact whose mode or owner the runtime refuses.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/fixtures.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/fixtures.mdx
index 0f03362b1..98a08482b 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/fixtures.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/fixtures.mdx
@@ -18,7 +18,7 @@ Drive the evidence binary across a project's bundle fixtures.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/fixtures/run.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/fixtures/run.mdx
index e841f1753..e743ebaf4 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/fixtures/run.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/fixtures/run.mdx
@@ -18,7 +18,7 @@ Run `evidence check` and every bundle fixture through `evidence evaluate`.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/jwks.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/jwks.mdx
index de4d8c784..485b2c88b 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/jwks.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/jwks.mdx
@@ -18,7 +18,7 @@ Assemble a public JWKS document from public JWK files.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen.mdx
index 411cbfae2..a1ab5f944 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen.mdx
@@ -18,7 +18,7 @@ Generate Evidence Gateway deployment key material as owner-only files.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/client-assertion.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/client-assertion.mdx
index 97986cb68..bc6ce998a 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/client-assertion.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/client-assertion.mdx
@@ -18,7 +18,7 @@ Keypair a source's `clientAssertionKeyRef` points at, for a token endpoint that
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/holder.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/holder.mdx
index 28548f7a7..2a7fb37f0 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/holder.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/holder.mdx
@@ -18,7 +18,7 @@ P-256 ES256 holder keypair for SD-JWT VC confirmation binding.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/secret.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/secret.mdx
index a13bfea7b..206605f68 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/secret.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/secret.mdx
@@ -18,7 +18,7 @@ One random raw secret file, 32 bytes (audit or subject-binding HMAC).
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Description
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/signing.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/signing.mdx
index df4cb8ace..002b44882 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/signing.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/signing.mdx
@@ -18,7 +18,7 @@ P-256 ES256 signing keypair as private and public JWK files.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/token.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/token.mdx
index bd32a5566..8c512f9e5 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/keygen/token.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/keygen/token.mdx
@@ -18,7 +18,7 @@ One random bearer token file, printable and header-safe.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/new.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/new.mdx
index b19e299f3..b551aae25 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/new.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/new.mdx
@@ -18,7 +18,7 @@ Start an editable Evidence Gateway project from OpenAPI or a SQLite extract.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/request.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/request.mdx
index dab3e97d7..3729ef8ac 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/request.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/request.mdx
@@ -18,7 +18,7 @@ Prepare a closed request for the active local project.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/request/prepare.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/request/prepare.mdx
index 7c76b032a..d4b2454a9 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/request/prepare.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/request/prepare.mdx
@@ -18,7 +18,7 @@ Prepare the request, authorization header, and verification context.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/request/verify.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/request/verify.mdx
index 7a0e90547..e1b477cf6 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/request/verify.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/request/verify.mdx
@@ -18,7 +18,7 @@ Verify one retained Evidence Gateway response offline.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source.mdx
index 2cabc97d3..3d4b8cc99 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source.mdx
@@ -18,7 +18,7 @@ Work with a project's sources, starting from their own API documents.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock.mdx
index fbb0e6d04..ed856be3f 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock.mdx
@@ -18,7 +18,7 @@ Generate, inspect, and serve a local synthetic source API.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/check.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/check.mdx
index 28902aba6..43f0fb730 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/check.mdx
@@ -18,7 +18,7 @@ Validate edited configuration and response bodies without writing or binding.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/generate.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/generate.mdx
index c1f2f7a7a..604935467 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/generate.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/generate.mdx
@@ -18,7 +18,7 @@ Materialize or extend editable mock cases from OpenAPI.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/serve.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/serve.mdx
index 99456a71d..13a80153b 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/serve.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source/mock/serve.mdx
@@ -18,7 +18,7 @@ Serve schema-valid synthetic responses from OpenAPI or exact edited cases.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/source/suggest.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/source/suggest.mdx
index a699205fe..e079a7a9b 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/source/suggest.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/source/suggest.mdx
@@ -18,7 +18,7 @@ Suggest source configuration from an OpenAPI document.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/tooling.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/tooling.mdx
index fe6ce0b28..89f43c27f 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/tooling.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/tooling.mdx
@@ -18,7 +18,7 @@ Advanced: editor and tooling integration surfaces.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/tooling/editor.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/tooling/editor.mdx
index e7a1bc66b..e9b36b5c9 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/tooling/editor.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/tooling/editor.mdx
@@ -18,7 +18,7 @@ Write project-local schema mappings for a YAML-aware editor.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/tooling/language-server.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/tooling/language-server.mdx
index 3140d8e47..2844953b7 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/tooling/language-server.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/tooling/language-server.mdx
@@ -18,7 +18,7 @@ Run cross-file navigation over the Language Server Protocol.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/evidencectl/verify.mdx b/docs/site/src/content/docs/reference/cli/evidencectl/verify.mdx
index 98f1f5c69..913b4cab3 100644
--- a/docs/site/src/content/docs/reference/cli/evidencectl/verify.mdx
+++ b/docs/site/src/content/docs/reference/cli/evidencectl/verify.mdx
@@ -18,7 +18,7 @@ Verify one retained Evidence Gateway response offline.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/index.mdx b/docs/site/src/content/docs/reference/cli/index.mdx
index e673898af..2a3525482 100644
--- a/docs/site/src/content/docs/reference/cli/index.mdx
+++ b/docs/site/src/content/docs/reference/cli/index.mdx
@@ -18,7 +18,7 @@ Use these generated references for exact command syntax, arguments, options, def
 
 ## Contract status
 
-The pages in this section are generated from the public Clap command trees for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+The pages in this section are generated from the public Clap command trees for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Registry Relay
 
diff --git a/docs/site/src/content/docs/reference/cli/mint.mdx b/docs/site/src/content/docs/reference/cli/mint.mdx
index d46fd496c..ff3d06a4d 100644
--- a/docs/site/src/content/docs/reference/cli/mint.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint.mdx
@@ -18,7 +18,7 @@ Registry Stack token issuer.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/check.mdx b/docs/site/src/content/docs/reference/cli/mint/check.mdx
index 5bcd9c1ff..8841ec135 100644
--- a/docs/site/src/content/docs/reference/cli/mint/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/check.mdx
@@ -18,7 +18,7 @@ Load the configuration, keys, audit chain, and client registry, then exit.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/client-secret.mdx b/docs/site/src/content/docs/reference/cli/mint/client-secret.mdx
index 845deba73..5f8d0d620 100644
--- a/docs/site/src/content/docs/reference/cli/mint/client-secret.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/client-secret.mdx
@@ -18,7 +18,7 @@ Provision high-entropy credentials for compatible managed clients.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/client-secret/generate.mdx b/docs/site/src/content/docs/reference/cli/mint/client-secret/generate.mdx
index c18f485c1..d31a746d2 100644
--- a/docs/site/src/content/docs/reference/cli/mint/client-secret/generate.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/client-secret/generate.mdx
@@ -18,7 +18,7 @@ Generate one credential file and print its non-secret fingerprint.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/healthcheck.mdx b/docs/site/src/content/docs/reference/cli/mint/healthcheck.mdx
index c06901413..9056d450a 100644
--- a/docs/site/src/content/docs/reference/cli/mint/healthcheck.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/healthcheck.mdx
@@ -18,7 +18,7 @@ Probe a numeric private readiness endpoint without ambient proxy use.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/serve.mdx b/docs/site/src/content/docs/reference/cli/mint/serve.mdx
index e3d00ca9e..6e39a5271 100644
--- a/docs/site/src/content/docs/reference/cli/mint/serve.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/serve.mdx
@@ -18,7 +18,7 @@ Serve the token endpoint until terminated.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/token.mdx b/docs/site/src/content/docs/reference/cli/mint/token.mdx
index 9f37f83aa..294b952f5 100644
--- a/docs/site/src/content/docs/reference/cli/mint/token.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/token.mdx
@@ -18,7 +18,7 @@ Obtain an access token from a running token endpoint, as a client would.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Description
 
diff --git a/docs/site/src/content/docs/reference/cli/mint/verify-audit.mdx b/docs/site/src/content/docs/reference/cli/mint/verify-audit.mdx
index 39b0f0019..5ffdc275b 100644
--- a/docs/site/src/content/docs/reference/cli/mint/verify-audit.mdx
+++ b/docs/site/src/content/docs/reference/cli/mint/verify-audit.mdx
@@ -18,7 +18,7 @@ Verify the retained keyed Mint audit chain named by the configuration.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relay.mdx b/docs/site/src/content/docs/reference/cli/relay.mdx
index 66a7c64e2..ffbdd6828 100644
--- a/docs/site/src/content/docs/reference/cli/relay.mdx
+++ b/docs/site/src/content/docs/reference/cli/relay.mdx
@@ -18,7 +18,7 @@ Compiled read-only Registry Relay runtime.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relay/check.mdx b/docs/site/src/content/docs/reference/cli/relay/check.mdx
index f895530e7..032cd5e41 100644
--- a/docs/site/src/content/docs/reference/cli/relay/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/relay/check.mdx
@@ -18,7 +18,7 @@ Validate the sealed package and every deployment dependency without taking the l
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relay/healthcheck.mdx b/docs/site/src/content/docs/reference/cli/relay/healthcheck.mdx
index 6d253db79..70bcfec91 100644
--- a/docs/site/src/content/docs/reference/cli/relay/healthcheck.mdx
+++ b/docs/site/src/content/docs/reference/cli/relay/healthcheck.mdx
@@ -18,7 +18,7 @@ Probe an unauthenticated Relay liveness endpoint.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relay/serve.mdx b/docs/site/src/content/docs/reference/cli/relay/serve.mdx
index 3bec29c52..96fe45a26 100644
--- a/docs/site/src/content/docs/reference/cli/relay/serve.mdx
+++ b/docs/site/src/content/docs/reference/cli/relay/serve.mdx
@@ -18,7 +18,7 @@ Verify and activate one sealed Registry package, then serve it.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl.mdx b/docs/site/src/content/docs/reference/cli/relayctl.mdx
index 4492a0012..dd8c8dc28 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl.mdx
@@ -18,7 +18,7 @@ Relay V2 project authoring, validation, and packaging.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/check.mdx b/docs/site/src/content/docs/reference/cli/relayctl/check.mdx
index 9c76a344e..9e6043bb2 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/check.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/check.mdx
@@ -18,7 +18,7 @@ Compile and validate an authoring project.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/diff.mdx b/docs/site/src/content/docs/reference/cli/relayctl/diff.mdx
index c8a529ebf..a06f6cbd5 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/diff.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/diff.mdx
@@ -18,7 +18,7 @@ Classify meaning, disclosure, and security changes between projects.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/generate.mdx b/docs/site/src/content/docs/reference/cli/relayctl/generate.mdx
index 7eeda6574..3ff76007c 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/generate.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/generate.mdx
@@ -18,7 +18,7 @@ Generate deterministic artifacts from the compiled project.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/init.mdx b/docs/site/src/content/docs/reference/cli/relayctl/init.mdx
index cd9b9785d..1373c2f73 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/init.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/init.mdx
@@ -18,7 +18,7 @@ Initialize a complete authoring project with unreviewed starters.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/inspect.mdx b/docs/site/src/content/docs/reference/cli/relayctl/inspect.mdx
index 06716532f..4cd84b501 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/inspect.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/inspect.mdx
@@ -18,7 +18,7 @@ Inspect SQLite structure without reading row values.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/package.mdx b/docs/site/src/content/docs/reference/cli/relayctl/package.mdx
index 4f98b550c..075037fec 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/package.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/package.mdx
@@ -18,7 +18,7 @@ Build a deterministic sealed deployment package.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/test.mdx b/docs/site/src/content/docs/reference/cli/relayctl/test.mdx
index 0562a11b6..c946a57b7 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/test.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/test.mdx
@@ -18,7 +18,7 @@ Run the project's offline fixture cases through the shared kernel.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/tooling.mdx b/docs/site/src/content/docs/reference/cli/relayctl/tooling.mdx
index 1a01f8510..bfc55191e 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/tooling.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/tooling.mdx
@@ -18,7 +18,7 @@ Advanced editor and language-server integration surfaces.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/tooling/editor.mdx b/docs/site/src/content/docs/reference/cli/relayctl/tooling/editor.mdx
index cf3af1fbf..287ff7e48 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/tooling/editor.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/tooling/editor.mdx
@@ -18,7 +18,7 @@ Write project-local schema mappings for VS Code and Zed.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/content/docs/reference/cli/relayctl/tooling/language-server.mdx b/docs/site/src/content/docs/reference/cli/relayctl/tooling/language-server.mdx
index 5f5c45fe0..2c81c8165 100644
--- a/docs/site/src/content/docs/reference/cli/relayctl/tooling/language-server.mdx
+++ b/docs/site/src/content/docs/reference/cli/relayctl/tooling/language-server.mdx
@@ -18,7 +18,7 @@ Run Relay V2 authoring support over the Language Server Protocol.
 
 ## Contract status
 
-This page is generated from the public Clap command tree for Registry Stack source version `0.22.0` and catalog SHA-256 `fe4105ba54e59e4bf4e02bd41ec52798b32451cc75977ebaecc71c6991f6e4e2`. Hidden implementation commands are omitted.
+This page is generated from the public Clap command tree for Registry Stack source version `0.23.0` and catalog SHA-256 `649e56dadd5f1daf991514b270a8ebecdba3bb41f6b9b417064878923f2af63e`. Hidden implementation commands are omitted.
 
 ## Usage
 
diff --git a/docs/site/src/data/archive-lock.yaml b/docs/site/src/data/archive-lock.yaml
index fb3cf9e25..34d0e864c 100644
--- a/docs/site/src/data/archive-lock.yaml
+++ b/docs/site/src/data/archive-lock.yaml
@@ -94,3 +94,7 @@ archives:
     bundle_sha256: 2c28e1fa225424d2b07346c8ab409db6aa978256488c4359032ce0223a8759f9
     root_tree_sha256: bc051350d993f6a20f59dc8540c680cec395b38097433fc181aa0eb1f15d5cd4
     version_tree_sha256: 2c167436177b054bba0fd4420885274b768ba72de6d99cd9a2bd7be9c2b91ed1
+  v0.23.0:
+    bundle_sha256: 3777f6833d2b1fc828e809a75fbbf40d485f3023edc233bddbdbbd0b3596a877
+    root_tree_sha256: 7d9cc7d4a7dde523562a3813f8faf6545d219a8f097c9891649db21cb7e47a57
+    version_tree_sha256: 0fab2706a8f2faf81869370c7510d2f5d034494c17fe252f34835fdeb96fc1b7
diff --git a/docs/site/src/data/contracts.yaml b/docs/site/src/data/contracts.yaml
index 362df6d23..d699b9e74 100644
--- a/docs/site/src/data/contracts.yaml
+++ b/docs/site/src/data/contracts.yaml
@@ -35,7 +35,7 @@
   surface: Portable `metadata.yaml` documents, compiled metadata model, public services, forms, policies, requirements, evidence type lists, evidence offering metadata, and evaluation profile metadata.
   source_of_truth:
     label: Registry Manifest core
-    url: https://github.com/registrystack/registry-stack/blob/v0.22.0/crates/registry-manifest-core/src/lib.rs
+    url: https://github.com/registrystack/registry-stack/blob/v0.23.0/crates/registry-manifest-core/src/lib.rs
   consumer_note: Runtime source paths, scopes, table or view names, endpoint locations, credentials, and other deployment bindings belong in consuming service configuration, not manifests.
 - id: registry-manifest.cpsv-ap-service-catalogue
   name: CPSV-AP Service Catalogue Render Contract
@@ -44,7 +44,7 @@
   surface: CPSV-AP JSON-LD service catalogue, CCCEV requirements, grouped evidence type lists, local form-definition links, DCAT data services, and form JSON Schemas.
   source_of_truth:
     label: Registry Manifest CPSV-AP fixture
-    url: https://github.com/registrystack/registry-stack/tree/v0.22.0/products/manifest/fixtures/cpsv-ap
+    url: https://github.com/registrystack/registry-stack/tree/v0.23.0/products/manifest/fixtures/cpsv-ap
   consumer_note: Each CCCEV evidence type list is one grouped option; multiple lists on a requirement are alternatives.
 - id: registry-manifest.static-publication
   name: Static Discovery Bundle
@@ -53,5 +53,5 @@
   surface: Static index, catalog JSON, evidence offerings, policies, DCAT, CPSV-AP, BRegDCAT-AP, SHACL, OGC Records item collection, entity JSON Schemas, form JSON Schemas, and embedded SKOS-shaped codelist nodes.
   source_of_truth:
     label: Registry Manifest CLI
-    url: https://github.com/registrystack/registry-stack/tree/v0.22.0/crates/registry-manifest-cli
+    url: https://github.com/registrystack/registry-stack/tree/v0.23.0/crates/registry-manifest-cli
   consumer_note: The bundle can be hosted as static files without running Registry Relay.
diff --git a/docs/site/src/data/docsets.yaml b/docs/site/src/data/docsets.yaml
index 4275368ee..06935e8f7 100644
--- a/docs/site/src/data/docsets.yaml
+++ b/docs/site/src/data/docsets.yaml
@@ -23,6 +23,28 @@ docsets:
       registry-evidence:
         version: main source (unreleased)
         ref: HEAD
+  - id: v0.23.0
+    label: v0.23.0
+    path: /v/0.23.0/
+    status: archived
+    availability: candidate
+    source: registry-stack-v0.23.0
+    repo_docs_source: monorepo
+    published_at: 2026-08-20
+    description: Registry Stack v0.23.0 beta-34 candidate documentation set.
+    products:
+      registry-stack:
+        version: v0.23.0
+        ref: v0.23.0
+      registry-relay:
+        version: v0.23.0
+        ref: v0.23.0
+      registry-manifest:
+        version: v0.23.0
+        ref: v0.23.0
+      registry-evidence:
+        version: v0.23.0
+        ref: v0.23.0
   - id: v0.22.0
     label: v0.22.0
     path: /v/0.22.0/
diff --git a/docs/site/src/data/generated/cli-reference.json b/docs/site/src/data/generated/cli-reference.json
index c0441ece0..2d7656d8a 100644
--- a/docs/site/src/data/generated/cli-reference.json
+++ b/docs/site/src/data/generated/cli-reference.json
@@ -1,6 +1,6 @@
 {
   "schema_version": "registry.cli-reference/v2",
-  "source_version": "0.22.0",
+  "source_version": "0.23.0",
   "binaries": [
     {
       "name": "evidence",
diff --git a/docs/site/src/data/generated/contracts.json b/docs/site/src/data/generated/contracts.json
index ea58ff0b9..250f65226 100644
--- a/docs/site/src/data/generated/contracts.json
+++ b/docs/site/src/data/generated/contracts.json
@@ -31,7 +31,7 @@
     "surface": "Portable `metadata.yaml` documents, compiled metadata model, public services, forms, policies, requirements, evidence type lists, evidence offering metadata, and evaluation profile metadata.",
     "source_of_truth": {
       "label": "Registry Manifest core",
-      "url": "https://github.com/registrystack/registry-stack/blob/v0.22.0/crates/registry-manifest-core/src/lib.rs"
+      "url": "https://github.com/registrystack/registry-stack/blob/v0.23.0/crates/registry-manifest-core/src/lib.rs"
     },
     "consumer_note": "Runtime source paths, scopes, table or view names, endpoint locations, credentials, and other deployment bindings belong in consuming service configuration, not manifests."
   },
@@ -43,7 +43,7 @@
     "surface": "CPSV-AP JSON-LD service catalogue, CCCEV requirements, grouped evidence type lists, local form-definition links, DCAT data services, and form JSON Schemas.",
     "source_of_truth": {
       "label": "Registry Manifest CPSV-AP fixture",
-      "url": "https://github.com/registrystack/registry-stack/tree/v0.22.0/products/manifest/fixtures/cpsv-ap"
+      "url": "https://github.com/registrystack/registry-stack/tree/v0.23.0/products/manifest/fixtures/cpsv-ap"
     },
     "consumer_note": "Each CCCEV evidence type list is one grouped option; multiple lists on a requirement are alternatives."
   },
@@ -55,7 +55,7 @@
     "surface": "Static index, catalog JSON, evidence offerings, policies, DCAT, CPSV-AP, BRegDCAT-AP, SHACL, OGC Records item collection, entity JSON Schemas, form JSON Schemas, and embedded SKOS-shaped codelist nodes.",
     "source_of_truth": {
       "label": "Registry Manifest CLI",
-      "url": "https://github.com/registrystack/registry-stack/tree/v0.22.0/crates/registry-manifest-cli"
+      "url": "https://github.com/registrystack/registry-stack/tree/v0.23.0/crates/registry-manifest-cli"
     },
     "consumer_note": "The bundle can be hosted as static files without running Registry Relay."
   }
diff --git a/docs/site/src/data/generated/docsets.json b/docs/site/src/data/generated/docsets.json
index deabc72c8..166607e7f 100644
--- a/docs/site/src/data/generated/docsets.json
+++ b/docs/site/src/data/generated/docsets.json
@@ -31,6 +31,35 @@
         }
       }
     },
+    {
+      "id": "v0.23.0",
+      "label": "v0.23.0",
+      "path": "/v/0.23.0/",
+      "status": "archived",
+      "availability": "candidate",
+      "source": "registry-stack-v0.23.0",
+      "repo_docs_source": "monorepo",
+      "published_at": "2026-08-20",
+      "description": "Registry Stack v0.23.0 beta-34 candidate documentation set.",
+      "products": {
+        "registry-stack": {
+          "version": "v0.23.0",
+          "ref": "v0.23.0"
+        },
+        "registry-relay": {
+          "version": "v0.23.0",
+          "ref": "v0.23.0"
+        },
+        "registry-manifest": {
+          "version": "v0.23.0",
+          "ref": "v0.23.0"
+        },
+        "registry-evidence": {
+          "version": "v0.23.0",
+          "ref": "v0.23.0"
+        }
+      }
+    },
     {
       "id": "v0.22.0",
       "label": "v0.22.0",
diff --git a/docs/site/src/data/repo-docs.yaml b/docs/site/src/data/repo-docs.yaml
index 30c215114..232503274 100644
--- a/docs/site/src/data/repo-docs.yaml
+++ b/docs/site/src/data/repo-docs.yaml
@@ -32,7 +32,7 @@ repos:
         standards_referenced: [govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld]
         exclude_docsets: [v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0]
             standards_referenced: [govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld]
             last_reviewed: unreviewed
         description: Approved Relay V2 product concept covering the registry contract, the compiler, the read-only source boundary, and the acceptance set.
@@ -45,7 +45,7 @@ repos:
         standards_referenced: [govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld]
         exclude_docsets: [v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0]
             standards_referenced: [govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld]
             last_reviewed: unreviewed
         description: Maintained directional mapping from Relay V2 to the pinned GovStack drafts and the aligned SDMX read subset. Makes no conformance claim.
@@ -66,7 +66,7 @@ repos:
         last_reviewed: unreviewed
         standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl, sp-dci, w3c-did, prov-o, govstack-digital-registries]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
             standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl, sp-dci, w3c-did, prov-o, govstack-digital-registries]
             last_reviewed: unreviewed
           - docsets: [beta-2026-06-12]
@@ -85,7 +85,7 @@ repos:
           - docsets: [beta-2026-06-12]
             standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, json-schema, json-ld, odrl]
             last_reviewed: unreviewed
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
             standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl]
             last_reviewed: unreviewed
       - src: products/manifest/docs/profile-fixtures.md
@@ -97,7 +97,7 @@ repos:
         last_reviewed: unreviewed
         standards_referenced: [sp-dci]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
             standards_referenced: [sp-dci]
             last_reviewed: unreviewed
       - src: products/manifest/docs/reference.md
@@ -112,7 +112,7 @@ repos:
           - docsets: [beta-2026-06-12]
             standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, json-schema, json-ld, cccev, odrl, w3c-did]
             last_reviewed: unreviewed
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3]
             standards_referenced: [dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, cccev, odrl, w3c-did]
             last_reviewed: unreviewed
       - src: products/manifest/docs/itb-semic-validation.md
@@ -124,7 +124,7 @@ repos:
         standards_referenced: [dcat, bregdcat-ap, shacl, skos, json-schema, json-ld]
         exclude_docsets: [beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1]
             standards_referenced: [dcat, bregdcat-ap, shacl, skos, json-schema, json-ld]
             last_reviewed: unreviewed
   registry-evidence:
@@ -144,7 +144,7 @@ repos:
         standards_referenced: [openapi, json-schema, sd-jwt-vc]
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: [openapi, json-schema, sd-jwt-vc]
             last_reviewed: unreviewed
         description: Operator and integrator documentation for Evidence Gateway, the minimum-disclosure assertion service.
@@ -157,7 +157,7 @@ repos:
         standards_referenced: [cccev, json-schema, openapi, sd-jwt-vc]
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: [cccev, json-schema, openapi, sd-jwt-vc]
             last_reviewed: unreviewed
         description: Approved Version 1 product concept covering the boundary, data model, trust and privacy invariants, native API, and acceptance set.
@@ -170,7 +170,7 @@ repos:
         standards_referenced: [json-schema, openapi, sd-jwt-vc]
         exclude_docsets: [v0.17.0, v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0]
             standards_referenced: [json-schema, openapi, sd-jwt-vc]
             last_reviewed: unreviewed
         description: Complete reference for the editable Evidence authoring project, its validation layers, local key material, and access policies.
@@ -183,7 +183,7 @@ repos:
         standards_referenced: []
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: []
             last_reviewed: unreviewed
         description: Deterministic local curl checkpoint against the Evidence Gateway server with a mock source and an in-memory test JWKS.
@@ -196,7 +196,7 @@ repos:
         standards_referenced: [sd-jwt-vc]
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: [sd-jwt-vc]
             last_reviewed: unreviewed
         description: Source-testing contract with the deterministic mock matrix, opt-in public demo smoke tests, and credential handling rules.
@@ -209,7 +209,7 @@ repos:
         standards_referenced: [sd-jwt-vc]
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: [sd-jwt-vc]
             last_reviewed: unreviewed
         description: Deterministic local demo that issues one assertion in both later-verifiable formats and re-verifies the credential offline.
@@ -222,7 +222,7 @@ repos:
         standards_referenced: [openapi, sd-jwt-vc]
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: [openapi, sd-jwt-vc]
             last_reviewed: unreviewed
         description: Supported deployment shape, requester authority and purpose duties, required configuration and secrets, and readiness, audit, and key obligations.
@@ -235,7 +235,7 @@ repos:
         standards_referenced: []
         exclude_docsets: [v0.16.3, v0.16.2, v0.16.1, v0.16.0, v0.15.2, v0.15.1, v0.15.0, v0.13.0, v0.12.2, v0.12.1, v0.12.0, v0.11.0, v0.10.0, v0.9.0, v0.8.4, v0.8.3, v0.8.2, v0.8.1, beta-5, beta-4, beta-3, beta-2026-06-12]
         docset_overrides:
-          - docsets: [v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
+          - docsets: [v0.23.0, v0.22.0, v0.21.0, v0.20.1, v0.20.0, v0.18.0, v0.17.0]
             standards_referenced: []
             last_reviewed: unreviewed
         description: Measured baseline of the audit-durability throughput trade and the deferred work that would recover most of the cost.
diff --git a/products/evidence/generated/registry-evidence.openapi.json b/products/evidence/generated/registry-evidence.openapi.json
index 42412aeff..42cf182c6 100644
--- a/products/evidence/generated/registry-evidence.openapi.json
+++ b/products/evidence/generated/registry-evidence.openapi.json
@@ -1804,7 +1804,7 @@
   "info": {
     "description": "Minimum-disclosure signed assertion service, Version 1.",
     "title": "Registry Evidence API",
-    "version": "0.22.0"
+    "version": "0.23.0"
   },
   "openapi": "3.1.0",
   "paths": {
diff --git a/products/manifest/CHANGELOG.md b/products/manifest/CHANGELOG.md
index c808aaff7..5c6ff375b 100644
--- a/products/manifest/CHANGELOG.md
+++ b/products/manifest/CHANGELOG.md
@@ -7,6 +7,10 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 
 ## [Unreleased]
 
+## [0.23.0] - 2026-08-20
+
+- No user-visible Registry Manifest format changes.
+
 ## [0.22.0] - 2026-08-14
 
 - No user-visible Registry Manifest format changes.
diff --git a/products/manifest/docs/release-notes.md b/products/manifest/docs/release-notes.md
index 5f7b575af..3928a0432 100644
--- a/products/manifest/docs/release-notes.md
+++ b/products/manifest/docs/release-notes.md
@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+## 0.23.0
+
+- Registry Manifest has no user-visible format changes in this release.
+
 ## 0.22.0
 
 - Registry Manifest has no user-visible format changes in this release.
diff --git a/products/manifest/fuzz/Cargo.lock b/products/manifest/fuzz/Cargo.lock
index d570005ba..3eb85ab07 100644
--- a/products/manifest/fuzz/Cargo.lock
+++ b/products/manifest/fuzz/Cargo.lock
@@ -188,7 +188,7 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
 
 [[package]]
 name = "registry-manifest-cli"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "registry-manifest-core",
  "serde",
@@ -199,7 +199,7 @@ dependencies = [
 
 [[package]]
 name = "registry-manifest-core"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "oxiri",
  "registry-platform-canonical-json",
@@ -223,7 +223,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-canonical-json"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "ryu-js",
  "serde",
diff --git a/products/platform/CHANGELOG.md b/products/platform/CHANGELOG.md
index 003402cd0..bd4c6bebf 100644
--- a/products/platform/CHANGELOG.md
+++ b/products/platform/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## v0.23.0 - 2026-08-20
+
+- No separately versioned Registry Platform API changes. The shared
+  outbound HTTP utilities gained crate-private DNS-pinned credential
+  clients used by the platform's own OAuth client authentication.
+
 ## v0.22.0 - 2026-08-14
 
 - Shared file-secret validation accepts owner-only mode `0400` for read-only
diff --git a/products/platform/fuzz/Cargo.lock b/products/platform/fuzz/Cargo.lock
index d23c96b37..8a3170bad 100644
--- a/products/platform/fuzz/Cargo.lock
+++ b/products/platform/fuzz/Cargo.lock
@@ -1514,7 +1514,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-authcommon"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "registry-platform-crypto",
@@ -1529,7 +1529,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-canonical-json"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "ryu-js",
  "serde",
@@ -1539,7 +1539,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-crypto"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "aws-lc-rs",
@@ -1580,7 +1580,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-httputil"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "async-trait",
  "base64",
@@ -1606,7 +1606,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-oidc"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "jsonwebtoken",
@@ -1621,7 +1621,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-sdjwt"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "base64",
  "getrandom 0.4.3",
@@ -1637,7 +1637,7 @@ dependencies = [
 
 [[package]]
 name = "registry-platform-sqlite"
-version = "0.22.0"
+version = "0.23.0"
 dependencies = [
  "rusqlite",
  "rustix",
diff --git a/release/manifests/registry-stack-beta-34.yaml b/release/manifests/registry-stack-beta-34.yaml
new file mode 100644
index 000000000..124ec3afd
--- /dev/null
+++ b/release/manifests/registry-stack-beta-34.yaml
@@ -0,0 +1,30 @@
+stack:
+  release: beta-34
+  version: 0.23.0
+  source_repo: registrystack/registry-stack
+  source_tag: v0.23.0
+
+artifacts:
+  registry-manifest: 0.23.0
+  relay: 0.23.0
+  relayctl: 0.23.0
+  evidence: 0.23.0
+  evidencectl: 0.23.0
+  mint: 0.23.0
+  evidence-oid4vci: 0.23.0
+  evidencectl-installer: 0.23.0
+  evidence-client-node: 0.23.0
+  evidence-client-python: 0.23.0
+  relay-installer: 0.23.0
+  registry-docs: 0.23.0
+  relay-client-node: 0.23.0
+  relay-client-python: 0.23.0
+  discovery-client-node: 0.23.0
+  discovery-client-python: 0.23.0
+
+identifier_catalog:
+  path: products/identifiers/generated/catalog.v1.json
+  sha256: b57e67fe5116773198884b322ffc04893553fedc41a7ced835661486fcc5adf1
+  entry_count: 51
+
+external: {}
diff --git a/release/notes/v0.23.0.md b/release/notes/v0.23.0.md
new file mode 100644
index 000000000..89b7a7a14
--- /dev/null
+++ b/release/notes/v0.23.0.md
@@ -0,0 +1,105 @@
+# Registry Stack v0.23.0
+
+Registry Stack v0.23.0 is the beta-34 minor release. It adds Registry
+Discovery as a curated read-only index of public service descriptions, adds a
+progressive Evidence client API, makes `relayctl` readable for adopters by
+default, and distributes the Registry Discovery client packages through npm and
+PyPI for the first time. The minor version reflects these additive surfaces. It
+does not retire a product or require a Registry Manifest format migration.
+
+## Registry Discovery
+
+- Registry Discovery is a curated, read-only index of public Evidence and Relay
+  service descriptions. It helps an application find advertisements. It does
+  not establish provider trust, authorize a caller, proxy a native request,
+  issue a credential, or carry credentials.
+- The first provider representation is the closed
+  `registry-discovery-v1alpha1` JSON-LD profile. It uses a deliberately
+  selected DCAT 3, DCAT-AP 3.0.1, and BRegDCAT-AP alignment subset, and claims
+  conformance to neither DCAT-AP nor BRegDCAT-AP in full. The pinned versions
+  and terms are in `products/discovery/contracts/standards-profile.yaml`.
+- The relying-party SDK performs a bounded, product-specific search and an
+  ambiguity-safe selection. An Evidence selection retains the complete resolved
+  AND-list and mapping provenance; a Relay selection retains the correlated
+  semantic-class and operation-family match. A persisted selection can be
+  revalidated before local trust accepts it and its advertised base URL is
+  handed to the native Evidence or Relay client. A selection remains inert
+  public metadata, not a trust decision and not a native request.
+- The operator flow is owned by `discoveryctl`: offline `check`, one explicit
+  `build`, deployment of an immutable index, then restart.
+- Provider and adopter flows are gated in continuous integration.
+
+## Registry Discovery client packages
+
+- The Discovery relying-party SDK ships as `@registrystack/discovery-client` on
+  npm and `registry-discovery-client` on PyPI, alongside the existing Evidence
+  and Relay clients. These are the first published versions.
+- Install a client package only at the exact Registry Stack version used by the
+  corresponding deployment. Do not treat an npm `0.0.0` package-identity
+  bootstrap as a usable client release.
+
+## Evidence progressive client API
+
+- The Evidence client SDKs gain a progressive API, so a relying party can make
+  a first assertion request without assembling the full request contract, then
+  move to the complete contract as its needs grow.
+- Evidence adopter tooling binds the same progressive contracts, so the command
+  line and the SDKs agree on what a request looks like.
+- The client tutorial paths are synchronized across the Node and Python
+  bindings, and the first assertion request is simplified.
+
+## Relay V2 adopter tooling
+
+- `relayctl` project workflow commands print a human-readable summary by
+  default, carrying the report status, counts, and every diagnostic in severity
+  order. `--json` selects the report document and its bytes are unchanged.
+  Previously both branches wrote the same JSON document and differed only by a
+  header line. This is specified in REQ-PR-RELAYCTL-026.
+- Column-accounting diagnostics report an inherited failure at the resource's
+  `classificationDefaults`, which the contract requires and which therefore
+  always resolves in an editor. The column-specific path is used only where an
+  override was actually authored, and the affected source column is named in
+  the message. Previously these diagnostics could name a YAML node the adopter
+  never wrote, which sent an editor to the start of the file.
+- Diagnostics name the column and order key they are about.
+- Every line of a human-readable report is escaped at the rendering boundary.
+  SQLite places no restriction on what an identifier may contain, and a
+  diagnostic carries an authored key path and often an authored column name, so
+  adopter-supplied text could otherwise forge a report line, emit terminal
+  escape sequences, or reorder the text drawn around it. The `--json` document
+  is unaffected.
+- The SDMX series branch decodes without a trailing refusal arm.
+
+## Documentation
+
+- The adopter documentation was reviewed and rewritten to read for a human
+  rather than for a runner, across tutorials, configuration references, and the
+  sidebar organization.
+- Tutorials no longer print values a reader cannot reproduce, such as compiled
+  contract revisions and installation-dependent counts.
+- Pagefind gzip archives are canonicalized so the built documentation is
+  byte-repeatable.
+
+## Security and maintenance
+
+- `h2` is upgraded to 0.4.17, past RUSTSEC-2026-0258 and GHSA-q83h-524g-xf6h.
+  Version 0.4.15 accepted and queued empty DATA frames without limit, risking
+  unbounded memory growth or a length-overflow panic when a malicious peer
+  sends them and bodies are not actively drained.
+- Release tooling recovers more smoothly from an interrupted run, and promotion
+  verifies an existing draft.
+
+## Release boundaries
+
+- Beta publication promotes one verified candidate from protected `main`
+  without rebuilding binaries, client packages, documentation, or runtime image
+  manifests.
+- The Discovery client packages require their npm and PyPI publishing identity
+  to be provisioned before the first v0.23.0 candidate is requested.
+- Candidate image scanning must complete successfully and applicable advisory
+  decisions must carry the required exposure evidence.
+- Exact already-completed image and client-registry operations may be
+  reconciled during a retry. A mismatched immutable image or package version
+  requires a new release version.
+- Hosted deployments, external conformance, and adopter-specific rollout
+  exercises remain outside this release's critical path.