diff --git a/CHANGELOG.md b/CHANGELOG.md
index e57468d..bf43bad 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,17 @@ cut and that this clone does not carry.
 
 ## [Unreleased]
 
+## [0.0.75] - 2026-09-25
+
+All seven setup systems refresh their software pins from current vendor
+artifacts, with bytes and SHA256 checked for six published platforms each:
+Claude Code 2.1.282, Codex 0.157.0, Grok Build 1.0.41, Pi 0.87.1,
+OpenCode 1.18.32, Cursor 2026.09.23-86fc751, and Antigravity CLI 1.2.11.
+The immediately preceding pins remain available for rollback. Pi's standalone
+0.87.1 binary reports 0.0.0 for --version; this observed vendor placeholder is
+bound to its exact Linux x86_64 artifact digest and is not the release identity.
+Provider protocol, setup content, postures and ownership are unchanged.
+
 ## [0.0.74] - 2026-09-24
 
 Antigravity non-minimal setups now carry allowNonWorkspaceAccess alongside
diff --git a/Cargo.lock b/Cargo.lock
index 2a04564..906d447 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -25,7 +25,7 @@ checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
 [[package]]
 name = "codex-setup-system"
-version = "0.0.74"
+version = "0.0.75"
 dependencies = [
  "harness-runtime",
  "provider-v3",
@@ -76,7 +76,7 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
 
 [[package]]
 name = "harness-runtime"
-version = "0.0.74"
+version = "0.0.75"
 dependencies = [
  "provider-v3",
  "serde",
@@ -147,7 +147,7 @@ dependencies = [
 
 [[package]]
 name = "provider-v3"
-version = "0.0.74"
+version = "0.0.75"
 dependencies = [
  "serde",
  "serde_json",
@@ -209,7 +209,7 @@ dependencies = [
 
 [[package]]
 name = "setup-core"
-version = "0.0.74"
+version = "0.0.75"
 dependencies = [
  "miniz_oxide",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index cbd4f4a..cff0dc9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,7 +8,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.0.74"
+version = "0.0.75"
 edition = "2024"
 rust-version = "1.89"
 license = "AGPL-3.0-or-later"
@@ -23,9 +23,9 @@ sha2 = "0.11"
 # `setup-core::archive`); an inflate loop is not, because its bugs are
 # memory-safety bugs and it is not improved by being hand-written here.
 miniz_oxide = "0.9"
-setup-core = { path = "crates/setup-core", version = "0.0.74" }
-provider-v3 = { path = "crates/provider-v3", version = "0.0.74" }
-harness-runtime = { path = "crates/harness-runtime", version = "0.0.74" }
+setup-core = { path = "crates/setup-core", version = "0.0.75" }
+provider-v3 = { path = "crates/provider-v3", version = "0.0.75" }
+harness-runtime = { path = "crates/harness-runtime", version = "0.0.75" }
 
 [workspace.lints.rust]
 unsafe_code = "forbid"
diff --git a/README.md b/README.md
index f2f6d77..b95b627 100644
--- a/README.md
+++ b/README.md
@@ -179,7 +179,7 @@ release is a convenience, not the authorised copy.
 
 ```bash
 docker run --rm -v "$HOME/.config:/config" \
-  ghcr.io/nddev-opennetwork/codex-setup-system:0.0.74 \
+  ghcr.io/nddev-opennetwork/codex-setup-system:0.0.75 \
   status --target /config/<dir> --json
 ```
 
diff --git a/crates/codex-setup-system/src/software.rs b/crates/codex-setup-system/src/software.rs
index 49a76d9..40d64c0 100644
--- a/crates/codex-setup-system/src/software.rs
+++ b/crates/codex-setup-system/src/software.rs
@@ -20,103 +20,103 @@ use harness_runtime::{Artifact, Delivery, Previous, Shape, Software};
 pub(crate) const ARTIFACTS: &[Artifact] = &[
     Artifact {
         platform: "linux/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-arm64.tgz",
-        bytes: 135_126_766,
-        sha256: "sha256:7da3e7bea6db4751d1b837f046c9cec08918ac7f05427dd0b5bcf64ea6c85964",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-linux-arm64.tgz",
+        bytes: 142_965_067,
+        sha256: "sha256:e94d36849541bb0e07aacbbf3edc99af7eba22ff813e6878eabd3e4c328309eb",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-unknown-linux-musl/bin/codex",
     },
     Artifact {
         platform: "linux/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-x64.tgz",
-        bytes: 142_140_011,
-        sha256: "sha256:f110cccdd50b0be8130b84f45b3144ea775c233f1c8bd8226da6ee719d63d206",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-linux-x64.tgz",
+        bytes: 150_316_314,
+        sha256: "sha256:8cc62b1a3b0d7fd2c3227c2b82a8c442bedff52a7b30b69850686e6f5129abd3",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-unknown-linux-musl/bin/codex",
     },
     Artifact {
         platform: "macos/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-arm64.tgz",
-        bytes: 127_465_533,
-        sha256: "sha256:93cc218b25b71c8da3edb50a013fbd22acf8f39058fb64083fefff638a084976",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-darwin-arm64.tgz",
+        bytes: 133_011_685,
+        sha256: "sha256:8ed1854086533492068d2c103e4b13c627b0def7716d038874f05474cb4fc718",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-apple-darwin/bin/codex",
     },
     Artifact {
         platform: "macos/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-x64.tgz",
-        bytes: 135_811_357,
-        sha256: "sha256:819db6dbb57a56cc21383a30331fc4115696e02f4c47ba7f686a285a2173fadd",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-darwin-x64.tgz",
+        bytes: 141_684_247,
+        sha256: "sha256:e147dcf9670f9ffa8134247c6db14a7ad3452899c23311dcd46e5d208c013307",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-apple-darwin/bin/codex",
     },
     Artifact {
         platform: "windows/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-arm64.tgz",
-        bytes: 135_509_012,
-        sha256: "sha256:72525256ac769a23381236a374c71679927c988dd10b7a19d342c98193216b7f",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-win32-arm64.tgz",
+        bytes: 150_580_314,
+        sha256: "sha256:bba499caac6a226dd1d05a934901734065708ae8e253361b1100831384db101d",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-pc-windows-msvc/bin/codex.exe",
     },
     Artifact {
         platform: "windows/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-x64.tgz",
-        bytes: 145_165_338,
-        sha256: "sha256:727fd5bfaeed16fe8fdeb57d1c0faa688f48edda4a0541323a103a3138925350",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-win32-x64.tgz",
+        bytes: 160_985_645,
+        sha256: "sha256:fe71b497453d7a5372842f50a8b737668dc0755624713ba8a9093f09419b79b8",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-pc-windows-msvc/bin/codex.exe",
     },
 ];
 
-/// The artifacts 0.154.0 was published as, kept so
+/// The artifacts 0.155.1 was published as, kept so
 /// `software_update` has a version to move from and `rollback` a tree to
 /// return to. Measured from bytes when it was the current pin.
 pub(crate) const PREVIOUS_ARTIFACTS: &[Artifact] = &[
     Artifact {
         platform: "linux/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-linux-arm64.tgz",
-        bytes: 122_610_794,
-        sha256: "sha256:a2315b5f64bfeaff79b71e0d35505ba8c22cc1e96cab9dc950b614c804105b24",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-arm64.tgz",
+        bytes: 135_126_766,
+        sha256: "sha256:7da3e7bea6db4751d1b837f046c9cec08918ac7f05427dd0b5bcf64ea6c85964",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-unknown-linux-musl/bin/codex",
     },
     Artifact {
         platform: "linux/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-linux-x64.tgz",
-        bytes: 129_654_638,
-        sha256: "sha256:e27c83a49e6031685ee7f956c12aad5f16484d3a80181dd3fea930fb96b3832b",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-x64.tgz",
+        bytes: 142_140_011,
+        sha256: "sha256:f110cccdd50b0be8130b84f45b3144ea775c233f1c8bd8226da6ee719d63d206",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-unknown-linux-musl/bin/codex",
     },
     Artifact {
         platform: "macos/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-darwin-arm64.tgz",
-        bytes: 116_501_639,
-        sha256: "sha256:2a98662d79316a59993c7233e3e25a1aa1d42da4b45904585d33a5a7da1cade1",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-arm64.tgz",
+        bytes: 127_465_533,
+        sha256: "sha256:93cc218b25b71c8da3edb50a013fbd22acf8f39058fb64083fefff638a084976",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-apple-darwin/bin/codex",
     },
     Artifact {
         platform: "macos/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-darwin-x64.tgz",
-        bytes: 124_308_807,
-        sha256: "sha256:92c493533c53c433c4d94252251daba4f379ccba06a9964d260abb47a535dce1",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-x64.tgz",
+        bytes: 135_811_357,
+        sha256: "sha256:819db6dbb57a56cc21383a30331fc4115696e02f4c47ba7f686a285a2173fadd",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-apple-darwin/bin/codex",
     },
     Artifact {
         platform: "windows/arm64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-win32-arm64.tgz",
-        bytes: 132_888_437,
-        sha256: "sha256:a072b19e67fd65f2827c925a9d3c89b1a55da70b8e24cc21b81c800a77cb3d53",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-arm64.tgz",
+        bytes: 135_509_012,
+        sha256: "sha256:72525256ac769a23381236a374c71679927c988dd10b7a19d342c98193216b7f",
         shape: Shape::GzipTar,
         member: "package/vendor/aarch64-pc-windows-msvc/bin/codex.exe",
     },
     Artifact {
         platform: "windows/x86_64",
-        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-win32-x64.tgz",
-        bytes: 142_162_836,
-        sha256: "sha256:27eedae55e37ed1da4078b36a6ef9e4ffe8546a60fd6df5ee6408fdd16aff8ea",
+        url: "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-x64.tgz",
+        bytes: 145_165_338,
+        sha256: "sha256:727fd5bfaeed16fe8fdeb57d1c0faa688f48edda4a0541323a103a3138925350",
         shape: Shape::GzipTar,
         member: "package/vendor/x86_64-pc-windows-msvc/bin/codex.exe",
     },
@@ -124,12 +124,12 @@ pub(crate) const PREVIOUS_ARTIFACTS: &[Artifact] = &[
 
 /// Codex's program, and where its bytes come from.
 pub(crate) const SOFTWARE: Software = Software {
-    version: "0.155.1",
+    version: "0.157.0",
     command: "codex",
     delivery: Delivery::Artifacts(ARTIFACTS),
     unsupported: &[],
     previous: Some(Previous {
-        version: "0.154.0",
+        version: "0.155.1",
         artifacts: PREVIOUS_ARTIFACTS,
     }),
 };
diff --git a/install.ps1 b/install.ps1
index dc54574..d89e008 100644
--- a/install.ps1
+++ b/install.ps1
@@ -7,7 +7,7 @@
 #   powershell -ExecutionPolicy Bypass -File install.ps1 -Version 0.1.0
 [CmdletBinding()]
 param(
-  [string]$Version = "0.0.74",
+  [string]$Version = "0.0.75",
   [string]$InstallDir = "$env:LOCALAPPDATA\Programs\codex-setup-system"
 )
 $ErrorActionPreference = "Stop"
diff --git a/install.sh b/install.sh
index c43d412..dadbb54 100644
--- a/install.sh
+++ b/install.sh
@@ -14,7 +14,7 @@ set -eu
 
 REPO="NDDev-OpenNetwork/codex-setup-system"
 BINARY="codex-setup-system"
-VERSION="${1:-0.0.74}"
+VERSION="${1:-0.0.75}"
 PREFIX="${CODEX_INSTALL_DIR:-$HOME/.local/bin}"
 
 case "$(uname -s)" in
diff --git a/references/codex-baseline.json b/references/codex-baseline.json
index 8a37cf0..7a3cdb1 100644
--- a/references/codex-baseline.json
+++ b/references/codex-baseline.json
@@ -21,12 +21,12 @@
     "desktop_documented_product": "ChatGPT",
     "desktop_pinned_cli_packaging": "Codex.app/Codex.dmg",
     "installer_asset": "install.sh",
-    "installer_release": "rust-v0.155.1",
-    "installed_version": "0.155.1",
+    "installer_release": "rust-v0.157.0",
+    "installed_version": "0.157.0",
     "standalone_layout": "packages/standalone"
   },
   "verified_version_ref": "build/version.json:codex_cli_tested",
-  "verified_at": "2026-09-19T14:51:09+00:00",
+  "verified_at": "2026-09-25T11:47:24+00:00",
   "native_surfaces": {
     "verified_at": "2026-08-31",
     "config_home": "~/.codex",
@@ -212,44 +212,44 @@
     "shape": "gzip-tar",
     "platforms": {
       "linux/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-arm64.tgz",
-        "bytes": 135126766,
-        "sha256": "sha256:7da3e7bea6db4751d1b837f046c9cec08918ac7f05427dd0b5bcf64ea6c85964",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-linux-arm64.tgz",
+        "bytes": 142965067,
+        "sha256": "sha256:e94d36849541bb0e07aacbbf3edc99af7eba22ff813e6878eabd3e4c328309eb",
         "member": "package/vendor/aarch64-unknown-linux-musl/bin/codex"
       },
       "linux/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-x64.tgz",
-        "bytes": 142140011,
-        "sha256": "sha256:f110cccdd50b0be8130b84f45b3144ea775c233f1c8bd8226da6ee719d63d206",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-linux-x64.tgz",
+        "bytes": 150316314,
+        "sha256": "sha256:8cc62b1a3b0d7fd2c3227c2b82a8c442bedff52a7b30b69850686e6f5129abd3",
         "member": "package/vendor/x86_64-unknown-linux-musl/bin/codex"
       },
       "macos/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-arm64.tgz",
-        "bytes": 127465533,
-        "sha256": "sha256:93cc218b25b71c8da3edb50a013fbd22acf8f39058fb64083fefff638a084976",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-darwin-arm64.tgz",
+        "bytes": 133011685,
+        "sha256": "sha256:8ed1854086533492068d2c103e4b13c627b0def7716d038874f05474cb4fc718",
         "member": "package/vendor/aarch64-apple-darwin/bin/codex"
       },
       "macos/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-x64.tgz",
-        "bytes": 135811357,
-        "sha256": "sha256:819db6dbb57a56cc21383a30331fc4115696e02f4c47ba7f686a285a2173fadd",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-darwin-x64.tgz",
+        "bytes": 141684247,
+        "sha256": "sha256:e147dcf9670f9ffa8134247c6db14a7ad3452899c23311dcd46e5d208c013307",
         "member": "package/vendor/x86_64-apple-darwin/bin/codex"
       },
       "windows/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-arm64.tgz",
-        "bytes": 135509012,
-        "sha256": "sha256:72525256ac769a23381236a374c71679927c988dd10b7a19d342c98193216b7f",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-win32-arm64.tgz",
+        "bytes": 150580314,
+        "sha256": "sha256:bba499caac6a226dd1d05a934901734065708ae8e253361b1100831384db101d",
         "member": "package/vendor/aarch64-pc-windows-msvc/bin/codex.exe"
       },
       "windows/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-x64.tgz",
-        "bytes": 145165338,
-        "sha256": "sha256:727fd5bfaeed16fe8fdeb57d1c0faa688f48edda4a0541323a103a3138925350",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.157.0-win32-x64.tgz",
+        "bytes": 160985645,
+        "sha256": "sha256:fe71b497453d7a5372842f50a8b737668dc0755624713ba8a9093f09419b79b8",
         "member": "package/vendor/x86_64-pc-windows-msvc/bin/codex.exe"
       }
     },
-    "version": "0.155.1",
-    "verified_at": "2026-09-19T14:51:09+00:00"
+    "version": "0.157.0",
+    "verified_at": "2026-09-25T11:47:24+00:00"
   },
   "setup_catalogue_digest": "sha256:bddb409bb05f14d42c9a9891b8579e4a289136d433c76f0b115efc5d1eae4882",
   "previous_software_artifacts": {
@@ -257,44 +257,44 @@
     "shape": "gzip-tar",
     "platforms": {
       "linux/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-linux-arm64.tgz",
-        "bytes": 122610794,
-        "sha256": "sha256:a2315b5f64bfeaff79b71e0d35505ba8c22cc1e96cab9dc950b614c804105b24",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-arm64.tgz",
+        "bytes": 135126766,
+        "sha256": "sha256:7da3e7bea6db4751d1b837f046c9cec08918ac7f05427dd0b5bcf64ea6c85964",
         "member": "package/vendor/aarch64-unknown-linux-musl/bin/codex"
       },
       "linux/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-linux-x64.tgz",
-        "bytes": 129654638,
-        "sha256": "sha256:e27c83a49e6031685ee7f956c12aad5f16484d3a80181dd3fea930fb96b3832b",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-linux-x64.tgz",
+        "bytes": 142140011,
+        "sha256": "sha256:f110cccdd50b0be8130b84f45b3144ea775c233f1c8bd8226da6ee719d63d206",
         "member": "package/vendor/x86_64-unknown-linux-musl/bin/codex"
       },
       "macos/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-darwin-arm64.tgz",
-        "bytes": 116501639,
-        "sha256": "sha256:2a98662d79316a59993c7233e3e25a1aa1d42da4b45904585d33a5a7da1cade1",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-arm64.tgz",
+        "bytes": 127465533,
+        "sha256": "sha256:93cc218b25b71c8da3edb50a013fbd22acf8f39058fb64083fefff638a084976",
         "member": "package/vendor/aarch64-apple-darwin/bin/codex"
       },
       "macos/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-darwin-x64.tgz",
-        "bytes": 124308807,
-        "sha256": "sha256:92c493533c53c433c4d94252251daba4f379ccba06a9964d260abb47a535dce1",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-darwin-x64.tgz",
+        "bytes": 135811357,
+        "sha256": "sha256:819db6dbb57a56cc21383a30331fc4115696e02f4c47ba7f686a285a2173fadd",
         "member": "package/vendor/x86_64-apple-darwin/bin/codex"
       },
       "windows/arm64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-win32-arm64.tgz",
-        "bytes": 132888437,
-        "sha256": "sha256:a072b19e67fd65f2827c925a9d3c89b1a55da70b8e24cc21b81c800a77cb3d53",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-arm64.tgz",
+        "bytes": 135509012,
+        "sha256": "sha256:72525256ac769a23381236a374c71679927c988dd10b7a19d342c98193216b7f",
         "member": "package/vendor/aarch64-pc-windows-msvc/bin/codex.exe"
       },
       "windows/x86_64": {
-        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.154.0-win32-x64.tgz",
-        "bytes": 142162836,
-        "sha256": "sha256:27eedae55e37ed1da4078b36a6ef9e4ffe8546a60fd6df5ee6408fdd16aff8ea",
+        "url": "https://registry.npmjs.org/@openai/codex/-/codex-0.155.1-win32-x64.tgz",
+        "bytes": 145165338,
+        "sha256": "sha256:727fd5bfaeed16fe8fdeb57d1c0faa688f48edda4a0541323a103a3138925350",
         "member": "package/vendor/x86_64-pc-windows-msvc/bin/codex.exe"
       }
     },
-    "version": "0.154.0",
-    "verified_at": "2026-09-16T13:21:19+00:00"
+    "version": "0.155.1",
+    "verified_at": "2026-09-19T14:51:09+00:00"
   },
   "capability_features": {
     "measured_at": "2026-08-30",