diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 5f057d6..1feb578 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1 +1 @@
-{".":"3.0.6"}
+{".":"3.0.7"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 12f9763..14ff0d6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project are documented here.
 This project follows [Semantic Versioning](https://semver.org/).
 
+## [3.0.7](https://github.com/edycutjong/BagOS/compare/v3.0.6...v3.0.7) (2026-09-25)
+
+
+### Documentation
+
+* **security:** state that the fee allowance sits outside both caps, and that the simulation check trusts the RPC ([47bddc5](https://github.com/edycutjong/BagOS/commit/47bddc588f92183bf139a66503708bda845493df))
+
 ## [3.0.6](https://github.com/edycutjong/BagOS/compare/v3.0.5...v3.0.6) (2026-09-24)
 
 
diff --git a/manifest.json b/manifest.json
index dca58e7..e2b302d 100644
--- a/manifest.json
+++ b/manifest.json
@@ -2,7 +2,7 @@
   "manifest_version": "0.2",
   "name": "bagos",
   "display_name": "BagOS",
-  "version": "3.0.6",
+  "version": "3.0.7",
   "description": "Every AI-initiated Solana spend: gated, capped, confirmed on chain.",
   "long_description": "MCP server for Bags on Solana. Read tools cover token analytics, creator-fee rosters, claim audit trails and trade quotes. The two write tools execute swaps and claim creator fees, but the first call to either signs nothing: it returns a preview and a single-use confirmation token fingerprinted to the exact arguments, so a token issued for a 0.01 SOL swap cannot authorize a 10 SOL one. Every write passes a token gate, a hard SOL spend cap per transaction and per session, and a simulation, before it is signed and submitted. Writes are off unless a keypair is configured and are mainnet-only; the server defaults to devnet so an unconfigured install cannot spend real money.",
   "author": {
diff --git a/package-lock.json b/package-lock.json
index ca99790..641c1f7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "bagos-mcp-server",
-  "version": "3.0.6",
+  "version": "3.0.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "bagos-mcp-server",
-      "version": "3.0.6",
+      "version": "3.0.7",
       "license": "MIT",
       "dependencies": {
         "@bagsfm/bags-sdk": "^1.3.7",
diff --git a/package.json b/package.json
index f45d24e..415ba1b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "bagos-mcp-server",
-  "version": "3.0.6",
+  "version": "3.0.7",
   "description": "MCP server for Bags on Solana: token analytics, trade quotes, and gated write operations.",
   "keywords": [
     "mcp",
diff --git a/server.json b/server.json
index 4a1df5b..daaac03 100644
--- a/server.json
+++ b/server.json
@@ -3,7 +3,7 @@
   "name": "io.github.edycutjong/bagos",
   "title": "BagOS",
   "description": "MCP server for Bags on Solana: token analytics, trade quotes, and gated write operations.",
-  "version": "3.0.6",
+  "version": "3.0.7",
   "websiteUrl": "https://github.com/edycutjong/bagos",
   "repository": {
     "url": "https://github.com/edycutjong/bagos",
@@ -15,7 +15,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "bagos-mcp-server",
-      "version": "3.0.6",
+      "version": "3.0.7",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"