diff --git a/releases-manifest.json b/releases-manifest.json
index 9b4c77d..1d5c56b 100644
--- a/releases-manifest.json
+++ b/releases-manifest.json
@@ -22,14 +22,14 @@
     {
       "id": "ariadne-resolver",
       "product": "Ariadne Resolver (Windows)",
-      "version": "0.1.6",
-      "date": "2026-09-27",
+      "version": "0.1.7",
+      "date": "2026-09-28",
       "platform": "win-x64",
       "signed": false,
       "signingAuthority": null,
-      "changes": "New TLDs reach other browsers without a reinstall. The resolver daemon now keeps the routing rules and the local root certificate in step with the BNS registry on its own: 90 seconds after start and every six hours it fetches the registry's routable TLDs, adds the routing rules that are missing and drops the ones that no longer apply, and when the certified set has actually changed it rotates the root certificate, trusts the new one in the Windows store and removes the old one. A rotation is rare (only when a TLD appears or disappears) and is logged; Firefox reads trusted roots at startup, so restart it once after a rotation. Includes 0.1.5 (every live registry TLD routed and certified, collision TLDs left to ICANN, daemon allow-list taken from the installed root). Upgrades in place.",
+      "changes": "Collision policy is now runtime-switchable machine-wide. The daemon hot-reloads C:\\ProgramData\\Ariadne\\policy.json every 5 seconds -- change {\"policy\":\"bcnr-first\"} to \"icann-first\" (or back) and every browser on the machine flips within seconds, no restart or reinstall. Install seeds the file with the current -Policy default and grants BUILTIN\\Users Modify on it, so an unprivileged app (Theseus's Ariadne panel, a text editor) can rewrite it without a UAC prompt. Invalid values keep the last good policy. Also fixes an intermittent \"config unreadable\" at daemon start when the config file had a UTF-8 BOM (same class of bug 0.1.6 fixed in the TLD-sync path). Includes 0.1.6 (daemon self-syncs routing + CA to the BNS registry every 6 hours). Upgrades in place.",
       "files": {
-        "AriadneResolver-Setup-0.1.6.exe": "e7fbe35d6e2c72e4a25db636502b7b5a2df1cf32039f7e1649154b40601a7865"
+        "AriadneResolver-Setup-0.1.7.exe": "742f8005c2dfb47929287c009cddf7738f0d12bd56fb8f8a837df3e9b435f47f"
       }
     },
     {
diff --git a/releases/index.html b/releases/index.html
index f42cbbf..f4dcc64 100644
--- a/releases/index.html
+++ b/releases/index.html
@@ -72,12 +72,12 @@
   </div>
 
   <div class="rel">
-    <h2>Ariadne Resolver — Windows <span style="color:var(--acid)">0.1.6</span></h2>
-    <div class="meta">Windows 64-bit · unsigned · bundled Node runtime · 2026-09-27 · <b>0.1.6 — new TLDs work without a reinstall</b> — New TLDs reach other browsers without a reinstall. The resolver daemon now keeps the routing rules and the local root certificate in step with the BNS registry on its own: 90 seconds after start and every six hours it fetches the registry's routable TLDs, adds the routing rules that are missing and drops the ones that no longer apply, and when the certified set has actually changed it rotates the root certificate, trusts the new one in the Windows store and removes the old one. A rotation is rare (only when a TLD appears or disappears) and is logged; Firefox reads trusted roots at startup, so restart it once after a rotation. Includes 0.1.5 (every live registry TLD routed and certified, collision TLDs left to ICANN, daemon allow-list taken from the installed root). Upgrades in place.</div>
+    <h2>Ariadne Resolver — Windows <span style="color:var(--acid)">0.1.7</span></h2>
+    <div class="meta">Windows 64-bit · unsigned · bundled Node runtime · 2026-09-28 · <b>0.1.7 — collision policy is runtime-switchable machine-wide</b> — Pick <code style="display:inline">bcnr-first</code> or <code style="display:inline">icann-first</code> for the whole machine by writing <code style="display:inline">C:\ProgramData\Ariadne\policy.json</code>; the daemon hot-reloads it every 5 seconds and every browser on the box flips with it — no restart, no reinstall, no UAC. Install seeds the file with the current install-time default and grants <code style="display:inline">BUILTIN\Users</code> Modify so Theseus (or a text editor) can rewrite it unprivileged. Invalid values keep the last good policy. Also fixes a "config unreadable" at daemon start when the config file had a UTF-8 BOM. Includes 0.1.6 (daemon self-syncs routing + CA to the BNS registry every 6 hours). Upgrades in place.</div>
 
     <div class="file">
-      <div class="n"><a href="https://dl.silentmode.st/AriadneResolver-Setup-0.1.6.exe">AriadneResolver-Setup-0.1.6.exe</a> — ~24 MB</div>
-      <code>e7fbe35d6e2c72e4a25db636502b7b5a2df1cf32039f7e1649154b40601a7865</code>
+      <div class="n"><a href="https://dl.silentmode.st/AriadneResolver-Setup-0.1.7.exe">AriadneResolver-Setup-0.1.7.exe</a> — ~24 MB</div>
+      <code>742f8005c2dfb47929287c009cddf7738f0d12bd56fb8f8a837df3e9b435f47f</code>
     </div>
   </div>