diff --git a/Directory.Build.props b/Directory.Build.props
index f3aa11c..216f773 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -14,7 +14,7 @@
   <PropertyGroup>
     <AsbVersionMajor>0</AsbVersionMajor>
     <AsbVersionMinor>1</AsbVersionMinor>
-    <AsbVersionPatch>6</AsbVersionPatch>
+    <AsbVersionPatch>7</AsbVersionPatch>
     <AsbVersionRevision>0</AsbVersionRevision>
 
     <!-- Derived forms - do not edit. -->
diff --git a/src/backend_mac/iso_patch_mac.m b/src/backend_mac/iso_patch_mac.m
index 8439f60..4879b80 100644
--- a/src/backend_mac/iso_patch_mac.m
+++ b/src/backend_mac/iso_patch_mac.m
@@ -598,8 +598,8 @@ static BOOL write_prov_scripts(NSString *dir, NSString *sshMsiName) {
     /* Signed ARM64 release: EV-signed agent EXEs + MS-attestation-signed drivers (VDD/VAD/AppSandboxSHM/
      * devcon). The release version is pinned in the cached filename, so a newer release auto-invalidates
      * the cache. The URL must stay publicly fetchable by an unauthenticated client. */
-    NSString *name   = @"AppSandbox-0.1.6-win-arm64.zip";
-    NSString *urlStr = @"https://github.com/jamesstringer90/appsandbox/releases/download/v0.1.6/AppSandbox-0.1.6-win-arm64.zip";
+    NSString *name   = @"AppSandbox-0.1.7-win-arm64.zip";
+    NSString *urlStr = @"https://github.com/jamesstringer90/appsandbox/releases/download/v0.1.7/AppSandbox-0.1.7-win-arm64.zip";
     NSString *cacheDir = [[VmDir vmsRootDirectory] URLByDeletingLastPathComponent].path;
     [[NSFileManager defaultManager] createDirectoryAtPath:cacheDir
                               withIntermediateDirectories:YES attributes:nil error:nil];
diff --git a/tools/headless-api/README.md b/tools/headless-api/README.md
index e97890f..38a816a 100644
--- a/tools/headless-api/README.md
+++ b/tools/headless-api/README.md
@@ -131,7 +131,7 @@ clear message** and a non-zero exit — it never half-starts:
    ```python
    import asb
    c = asb.connect()
-   print(c.version())   # {'product': 'AppSandbox', 'version': '0.1.6', ...}
+   print(c.version())   # {'product': 'AppSandbox', 'version': '0.1.7', ...}
    ```
 
 `asb.py` has no third-party dependencies; copy it next to your script, or add