diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 9965a3410..a549f59d0 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.3.0"
+  ".": "2.4.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5fef413f..909a50d0e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,25 @@
 # Changelog
 
+## [2.4.0](https://github.com/FSM1/cipher-box/compare/v2.3.0...v2.4.0) (2026-09-20)
+
+
+### Features
+
+* **engine:** admit a write target below a proved grafted write root ([#1910](https://github.com/FSM1/cipher-box/issues/1910)) ([bc49321](https://github.com/FSM1/cipher-box/commit/bc49321b5f397e50c0506b70782875c57b5d0964))
+* **engine:** hold a child the grantee published in a grafted base ([#1904](https://github.com/FSM1/cipher-box/issues/1904)) ([d1f05ee](https://github.com/FSM1/cipher-box/commit/d1f05ee307ac639162d160c6a7a666870cd4de8a))
+* **engine:** read an epoch-lagged record under the scope root ratchet ([#1921](https://github.com/FSM1/cipher-box/issues/1921)) ([c53b326](https://github.com/FSM1/cipher-box/commit/c53b326d0b6103e0cd0a3dc143eb61d9e45e8325))
+
+
+### Bug Fixes
+
+* **engine:** act on the Greptile findings that landed after five merges ([#1905](https://github.com/FSM1/cipher-box/issues/1905)) ([801ea55](https://github.com/FSM1/cipher-box/commit/801ea5561a0502cebfd55a0563b6f7f0b54bd1e5))
+* **engine:** cache what the write wave adopts before its floor moves ([#1914](https://github.com/FSM1/cipher-box/issues/1914)) ([8d449b3](https://github.com/FSM1/cipher-box/commit/8d449b3f9aa20255f961547b6cabed9ada26f83d))
+* **engine:** read a file under the scope it sits in ([#1912](https://github.com/FSM1/cipher-box/issues/1912)) ([00e24aa](https://github.com/FSM1/cipher-box/commit/00e24aada2181000ca673748b221f1b037325a8e))
+* **engine:** report every gate rejection as a trust verdict ([#1922](https://github.com/FSM1/cipher-box/issues/1922)) ([d9e314b](https://github.com/FSM1/cipher-box/commit/d9e314bb2526bf43d0834674e3e6e366baedce27))
+* **engine:** run the sweep as an idle job and admit a grafted version restore ([#1917](https://github.com/FSM1/cipher-box/issues/1917)) ([f4d6aa9](https://github.com/FSM1/cipher-box/commit/f4d6aa9d4bc1536a0d2cc0ce54e418f9bfd33a5c))
+* **engine:** vouch a vault root read cut at the vault pointer ([#1919](https://github.com/FSM1/cipher-box/issues/1919)) ([f2fe158](https://github.com/FSM1/cipher-box/commit/f2fe158f139f4095674d408488977ac2f769bb70))
+* **wasm:** fail the web floor store closed on a value it cannot read ([#1907](https://github.com/FSM1/cipher-box/issues/1907)) ([b4ffb2f](https://github.com/FSM1/cipher-box/commit/b4ffb2fa687630ed6b92498d3c9aec8db6a413d4))
+
 ## [2.3.0](https://github.com/FSM1/cipher-box/compare/v2.2.0...v2.3.0) (2026-09-19)
 
 
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index e2334acb1..a189bff65 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "CipherBox",
   "identifier": "com.cipherbox.desktop",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "build": {
     "beforeDevCommand": "pnpm dev:frontend",
     "beforeBuildCommand": "pnpm build",
diff --git a/package.json b/package.json
index 2a5745d07..977acbb31 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cipher-box",
-  "version": "2.3.0",
+  "version": "2.4.0",
   "private": true,
   "type": "module",
   "packageManager": "pnpm@10.33.0",