diff --git a/CHANGELOG.md b/CHANGELOG.md
index 940c157..c55552e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,17 @@ The notable changes of every release. The section of a version is the text of it
 
 ## [Unreleased]
 
+## [0.7.0] - 2026-10-30
+
+A release of hardening. A host name like `127.attacker.example` no longer passes for
+loopback, the poll endpoint is held to the same URI policy as the metadata endpoints
+before the access token goes to it, and responses from the transmitter are bounded,
+4 MiB by default. Every stream configuration the transmitter returns has its issuer
+checked, not only a created one. Stopping and starting a poller or a registrar again
+no longer leaves a thread or a stream behind, and the pending-acks gauge no longer
+turns `NaN`. The Quarkus extension mirrors the new `SsfPoller.setUriPolicy` and the
+maximum response size when it adopts this release.
+
 ### Security
 
 - A host name that merely starts with `127.`, such as `127.attacker.example`, counted as a loopback
@@ -256,7 +267,8 @@ Java library and as a Spring Boot 4.1 starter.
 - The framework-free modules are Java modules; every artifact is signed, carries a CycloneDX
   SBOM and a self-contained POM.
 
-[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.6.0...HEAD
+[Unreleased]: https://github.com/easyssf/easyssf/compare/v0.7.0...HEAD
+[0.7.0]: https://github.com/easyssf/easyssf/compare/v0.6.0...v0.7.0
 [0.6.0]: https://github.com/easyssf/easyssf/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/easyssf/easyssf/compare/v0.4.0...v0.5.0
 [0.4.0]: https://github.com/easyssf/easyssf/compare/v0.3.0...v0.4.0
diff --git a/README.md b/README.md
index eb37c3d..cb8637d 100644
--- a/README.md
+++ b/README.md
@@ -74,7 +74,7 @@ which a build has to enable with `<snapshots><enabled>true</enabled></snapshots>
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -121,7 +121,7 @@ configuration reference.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -295,7 +295,7 @@ Spring Boot modules are automatic modules.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
@@ -382,7 +382,7 @@ stream management and poll endpoints. The tests of easyssf itself use it.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-test</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
     <scope>test</scope>
 </dependency>
 ```
diff --git a/easyssf-core/pom.xml b/easyssf-core/pom.xml
index 2540bd6..3476601 100644
--- a/easyssf-core/pom.xml
+++ b/easyssf-core/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-core</artifactId>
     <name>easyssf-core</name>
diff --git a/easyssf-receiver-jdbc/pom.xml b/easyssf-receiver-jdbc/pom.xml
index 370532c..1c9b961 100644
--- a/easyssf-receiver-jdbc/pom.xml
+++ b/easyssf-receiver-jdbc/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-receiver-jdbc</artifactId>
diff --git a/easyssf-receiver-spring-boot-autoconfigure/pom.xml b/easyssf-receiver-spring-boot-autoconfigure/pom.xml
index e063b97..13eea91 100644
--- a/easyssf-receiver-spring-boot-autoconfigure/pom.xml
+++ b/easyssf-receiver-spring-boot-autoconfigure/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-autoconfigure</artifactId>
     <name>easyssf-receiver-spring-boot-autoconfigure</name>
diff --git a/easyssf-receiver-spring-boot-conformance-tests/pom.xml b/easyssf-receiver-spring-boot-conformance-tests/pom.xml
index 8df3149..c009205 100644
--- a/easyssf-receiver-spring-boot-conformance-tests/pom.xml
+++ b/easyssf-receiver-spring-boot-conformance-tests/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-conformance-tests</artifactId>
     <name>easyssf-receiver-spring-boot-conformance-tests</name>
diff --git a/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml b/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml
index d4dddae..cee0702 100644
--- a/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml
+++ b/easyssf-receiver-spring-boot-examples/example-oidc-client/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-oidc-client</artifactId>
     <name>example-oidc-client</name>
diff --git a/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml b/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml
index ffb1d2a..4717dc4 100644
--- a/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml
+++ b/easyssf-receiver-spring-boot-examples/example-resource-server/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-resource-server</artifactId>
     <name>example-resource-server</name>
diff --git a/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml b/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml
index 24acd99..4a32825 100644
--- a/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml
+++ b/easyssf-receiver-spring-boot-examples/example-scim-provisioning/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>example-scim-provisioning</artifactId>
     <name>example-scim-provisioning</name>
diff --git a/easyssf-receiver-spring-boot-examples/pom.xml b/easyssf-receiver-spring-boot-examples/pom.xml
index 975b7ee..b0449a2 100644
--- a/easyssf-receiver-spring-boot-examples/pom.xml
+++ b/easyssf-receiver-spring-boot-examples/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-examples</artifactId>
     <name>easyssf-receiver-spring-boot-examples</name>
diff --git a/easyssf-receiver-spring-boot-starter/README.md b/easyssf-receiver-spring-boot-starter/README.md
index 25a20d4..5073181 100644
--- a/easyssf-receiver-spring-boot-starter/README.md
+++ b/easyssf-receiver-spring-boot-starter/README.md
@@ -10,7 +10,7 @@ Events, the test support.
 <dependency>
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
-    <version>0.6.0</version>
+    <version>0.7.0</version>
 </dependency>
 ```
 
diff --git a/easyssf-receiver-spring-boot-starter/pom.xml b/easyssf-receiver-spring-boot-starter/pom.xml
index c178ff6..108eb3a 100644
--- a/easyssf-receiver-spring-boot-starter/pom.xml
+++ b/easyssf-receiver-spring-boot-starter/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver-spring-boot-starter</artifactId>
     <name>easyssf-receiver-spring-boot-starter</name>
diff --git a/easyssf-receiver/pom.xml b/easyssf-receiver/pom.xml
index eeff985..b72fad9 100644
--- a/easyssf-receiver/pom.xml
+++ b/easyssf-receiver/pom.xml
@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
     <artifactId>easyssf-receiver</artifactId>
     <name>easyssf-receiver</name>
diff --git a/easyssf-test-conformance/pom.xml b/easyssf-test-conformance/pom.xml
index 62b2523..84775e6 100644
--- a/easyssf-test-conformance/pom.xml
+++ b/easyssf-test-conformance/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-test-conformance</artifactId>
diff --git a/easyssf-test/pom.xml b/easyssf-test/pom.xml
index 44da0ae..ad0a5c9 100644
--- a/easyssf-test/pom.xml
+++ b/easyssf-test/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>org.easyssf</groupId>
         <artifactId>easyssf-parent</artifactId>
-        <version>0.7.0-SNAPSHOT</version>
+        <version>0.8.0-SNAPSHOT</version>
     </parent>
 
     <artifactId>easyssf-test</artifactId>
diff --git a/pom.xml b/pom.xml
index 99afd67..36b484b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>org.easyssf</groupId>
     <artifactId>easyssf-parent</artifactId>
-    <version>0.7.0-SNAPSHOT</version>
+    <version>0.8.0-SNAPSHOT</version>
     <packaging>pom</packaging>
     <name>easyssf</name>
     <description>Building blocks for the OpenID Shared Signals Framework (SSF)</description>
@@ -67,7 +67,7 @@
              the newest JDK: -Dbytebuddy.experimental=true -->
         <bytebuddy.experimental>false</bytebuddy.experimental>
         <!-- reproducible builds: the timestamp of the files in the jars, updated for every release -->
-        <project.build.outputTimestamp>2026-10-12T06:44:10Z</project.build.outputTimestamp>
+        <project.build.outputTimestamp>2026-10-30T13:41:19Z</project.build.outputTimestamp>
 
         <!-- All modules build against the versions of the Spring Boot BOM, imported below.
              The plain modules (easyssf-core, easyssf-receiver) do not depend on Spring: