diff --git a/packages/autobot/pyproject.toml b/packages/autobot/pyproject.toml
index 106f3d3..7f9a4a2 100644
--- a/packages/autobot/pyproject.toml
+++ b/packages/autobot/pyproject.toml
@@ -36,9 +36,11 @@ classifiers = [
 # framework runtime — so it installs and runs standalone (a defender need not
 # pull in the offensive agent). Red/Blue are composed by Cybertron on top.
 dependencies = [
-    # 2.1.0 is the first core release carrying the AutoBot contract layer
-    # (OCSF event envelope, EventStoreProtocol, CoverageAdapterProtocol).
-    "decepticon-core>=2.1.0",
+    # AutoBot and Decepticon ship in lockstep (release policy §2) — the
+    # contract layer is version-compatible by construction. Unpinned so the
+    # co-installed Decepticon workspace's sentinel-versioned member satisfies
+    # the requirement (uv rejects a 0.0.0 member against a >= floor).
+    "decepticon-core",
     "pydantic>=2.0.0",
     # Agent runtime (Phase 2b-ii): the middleware stack is LangChain-native
     # (AgentMiddleware), matching the Decepticon agent architecture. The
diff --git a/uv.lock b/uv.lock
index 26b4056..22065de 100644
--- a/uv.lock
+++ b/uv.lock
@@ -108,7 +108,7 @@ testing = [
 
 [package.metadata]
 requires-dist = [
-    { name = "decepticon-core", specifier = ">=2.1.0" },
+    { name = "decepticon-core" },
     { name = "deepagents", specifier = ">=0.3.0" },
     { name = "httpx", specifier = ">=0.28.0" },
     { name = "langchain", specifier = ">=0.3.0" },