diff --git a/Cargo.lock b/Cargo.lock
index 5c238c5..9c1a2f2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -59,9 +59,9 @@ dependencies = [
 
 [[package]]
 name = "atomic-integration-proxy"
-version = "0.2.3"
+version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a2289c65118a5febf2409e137b03504d481610b07de7adec2da2b6ee2548eb8c"
+checksum = "a2e7ff3e4021a1bec51cd8068762d55981d44c5f3e826185a2342c177abcebe9"
 dependencies = [
  "axum",
  "axum-extra",
diff --git a/Cargo.toml b/Cargo.toml
index 39c520b..d3656e3 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ publish = false
 # Published to crates.io from ontola/atomic-plugins' integration-proxy/.
 # Bump this (and run `cargo update -p atomic-integration-proxy`) to deploy a
 # new release.
-atomic-integration-proxy = "0.2.3"
+atomic-integration-proxy = "=0.2.4"
 tokio = { version = "1", features = ["rt-multi-thread", "macros"] }
 
 [profile.release]
diff --git a/README.md b/README.md
index a3e149a..6aeac59 100644
--- a/README.md
+++ b/README.md
@@ -45,6 +45,12 @@ Without the required variables the binary exits with
 ## Catalog
 
 Unless `CATALOG_PATH` is set, the proxy loads its catalog at startup from
-`https://ontola.github.io/atomic-plugins/overlays/catalog.json`, which GitHub
-Pages publishes from `ontola/atomic-plugins`' `main`. It is not pinned to a
-commit: a restart picks up whatever `main` publishes at that moment.
+`https://ontola.github.io/atomic-plugins/overlays/catalog/2026-10-02.json`, which GitHub
+Pages publishes from `ontola/atomic-plugins`' `main`. Dated catalogs and
+the OAD-revision overlay filenames they select are immutable. Publish a new
+dated catalog and explicitly switch `CATALOG_PATH` to opt into later revisions.
+
+Version 0.2.4 checks an overlay's declared `extends` against the catalog OAD
+before applying actions. The full Discord OAD is present in this catalog;
+connection support for its mixed bot-token/OAuth schemes is tracked separately
+in ontola/atomic-plugins#258.