diff --git a/crates/solstone-linux/src/release_rail_tests.rs b/crates/solstone-linux/src/release_rail_tests.rs
index 02c3e22..43a1f48 100644
--- a/crates/solstone-linux/src/release_rail_tests.rs
+++ b/crates/solstone-linux/src/release_rail_tests.rs
@@ -128,6 +128,35 @@ fn package_metadata_and_resolved_licenses() {
     );
 }
 
+// AC: the committed proof policy names artifacts from the current workspace
+// version so an ordinary CI run catches a stale policy before candidate build.
+#[test]
+fn release_proof_install_commands_track_workspace_version() {
+    let policy = read_toml(&workspace_root().join("packaging/release-policy.toml"));
+    let expected = [
+        (
+            "debian-amd64",
+            format!("/input/solstone-linux_{VERSION}-1_amd64.deb"),
+        ),
+        (
+            "rpm-x86_64",
+            format!("/input/solstone-linux-{VERSION}-1.x86_64.rpm"),
+        ),
+        (
+            "tar-x86_64",
+            format!("/input/solstone-linux-{VERSION}-linux-x86_64.tar.gz"),
+        ),
+    ];
+
+    for (platform, artifact) in expected {
+        let command = policy[platform]["install_command"].as_array().unwrap();
+        assert_eq!(
+            command.last().and_then(Value::as_str),
+            Some(artifact.as_str())
+        );
+    }
+}
+
 // AC: both supported container engines share one ignore policy that excludes
 // host build products without hiding the canonical icon sources.
 #[test]
diff --git a/packaging/release-policy.toml b/packaging/release-policy.toml
index d06b275..15c8f98 100644
--- a/packaging/release-policy.toml
+++ b/packaging/release-policy.toml
@@ -10,7 +10,7 @@ proof_tar = "sha256:839e7fdc7ca1a3b2e46fd534c19f6d2fcdb1d9cf5b4ee846f129c3492b97
 image_digest = "sha256:839e7fdc7ca1a3b2e46fd534c19f6d2fcdb1d9cf5b4ee846f129c3492b97b8ff"
 os_release = "Ubuntu 22.04.5 LTS"
 package_manager_version = "Debian 'dpkg' package management program version 1.21.1 (amd64)."
-install_command = ["dpkg", "--install", "/input/solstone-linux_1.0.1-1_amd64.deb"]
+install_command = ["dpkg", "--install", "/input/solstone-linux_1.0.2-1_amd64.deb"]
 version_command = ["/usr/bin/solstone-linux", "--version"]
 executable_path = "/usr/bin/solstone-linux"
 executable_mode = 493
@@ -19,7 +19,7 @@ executable_mode = 493
 image_digest = "sha256:abd1c847cec58081952712108cedae273b510b90cf5953045a6fbb8961db0f0b"
 os_release = "Fedora Linux 42 (Container Image)"
 package_manager_version = "RPM version 4.20.1"
-install_command = ["rpm", "--install", "/input/solstone-linux-1.0.1-1.x86_64.rpm"]
+install_command = ["rpm", "--install", "/input/solstone-linux-1.0.2-1.x86_64.rpm"]
 version_command = ["/usr/bin/solstone-linux", "--version"]
 executable_path = "/usr/bin/solstone-linux"
 executable_mode = 493
@@ -28,7 +28,7 @@ executable_mode = 493
 image_digest = "sha256:839e7fdc7ca1a3b2e46fd534c19f6d2fcdb1d9cf5b4ee846f129c3492b97b8ff"
 os_release = "Ubuntu 22.04.5 LTS"
 package_manager_version = "installer portable-tar"
-install_command = ["/input/install.sh", "--prefix", "/proof-root", "/input/solstone-linux-1.0.1-linux-x86_64.tar.gz"]
+install_command = ["/input/install.sh", "--prefix", "/proof-root", "/input/solstone-linux-1.0.2-linux-x86_64.tar.gz"]
 version_command = ["/bin/solstone-linux", "--version"]
 executable_path = "/bin/solstone-linux"
 executable_mode = 493