diff --git a/pyproject.toml b/pyproject.toml
index d8d94fc..5e61c4d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -32,6 +32,7 @@ dev = [
     "pytest-asyncio>=0.23.0",
     "pytest-cov>=6.0.0",
     "hypothesis>=6.100.0",
+    "setuptools>=83.0.0",
 ]
 # #16: Sigstore keyless signing + verification of warden.lock. OPT-IN — the base
 # install stays sigstore-free. Pinned to the 4.3.x line the implementation was
diff --git a/requirements-dev.lock b/requirements-dev.lock
index 569c8ce..6b87120 100644
--- a/requirements-dev.lock
+++ b/requirements-dev.lock
@@ -805,6 +805,10 @@ rpds-py==2026.6.3 \
     # via
     #   jsonschema
     #   referencing
+setuptools==83.0.0 \
+    --hash=sha256:025bccbbf0fa05b6192bc64ae1e7b16e001fd6d6d4d5de03c97b1c1ade523bef \
+    --hash=sha256:29b23c360f22f414dc7336bb39178cc7bcbf6021ed2733cde173f09dba19abb3
+    # via mcp-warden-cli (pyproject.toml)
 shellingham==1.5.4 \
     --hash=sha256:7ecfff8f2fd72616f7481040475a65b2bf8af90a56c89140852d1120324e8686 \
     --hash=sha256:8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de