diff --git a/releases-manifest.json b/releases-manifest.json
index 6906504..3c74408 100644
--- a/releases-manifest.json
+++ b/releases-manifest.json
@@ -5,6 +5,20 @@
     "https://dl.silentmode.st/"
   ],
   "releases": [
+    {
+      "id": "theseus-navigator",
+      "product": "Theseus Navigator",
+      "version": "0.3.95",
+      "date": "2026-10-21",
+      "platform": "win-x64",
+      "signed": false,
+      "signingAuthority": null,
+      "changes": "New Settings page: Names & Certificates. Lets you pre-configure which non-BNS name systems Theseus will resolve (ENS, Namecoin, Handshake, SNS, Unstoppable Domains) and which extra TLS roots it will trust (Russian National CA, scoped by TLD). BNS stays on by default; everything else is off. Each row has its own Advanced disclosure for RPC URLs, gateways, endpoints, collision policy, and the Russian CA's TLD scope. Your choices persist to %APPDATA%\\Theseus\\extra-resolvers.json. This release is the UI shell — the resolver adapters land in 0.3.96 (ENS) through 0.3.99 (Russian CA), each row's \"Not wired yet\" caption disappearing as its adapter ships.",
+      "files": {
+        "TheseusNavigator-0.3.95-portable.exe": "072005bcf83516d253da85d905a3a7a82c9f4358160f0a7cbe4bacc3a75ccc52",
+        "TheseusNavigator-Setup-0.3.95.exe": "eb6fa211e916d5635befe5642dda0d588b3465eafc88af084ce0fe9ff34907da"
+      }
+    },
     {
       "id": "theseus-navigator",
       "product": "Theseus Navigator",
diff --git a/releases/index.html b/releases/index.html
index 918faff..75f4836 100644
--- a/releases/index.html
+++ b/releases/index.html
@@ -57,6 +57,20 @@
      name <code>releases.silentmode.bch</code>; the name pins where it is served from, so a tampered
      mirror cannot change what you check against here.</p>
 
+  <div class="rel">
+    <h2>Theseus Navigator <span style="color:var(--acid)">0.3.95</span></h2>
+    <div class="meta">Windows 64-bit · unsigned · 2026-10-21 · <b>0.3.95 — Names &amp; Certificates settings page</b> — New top-level Settings section lets you pre-configure which non-BNS name systems Theseus will resolve (ENS, Namecoin, Handshake, SNS, Unstoppable) and which extra TLS roots it will trust (Russian National CA, scoped to .ru/.рф/.gov.ru). BNS stays on by default; everything else is off. Each row has its own Advanced disclosure for RPC URLs, gateways, endpoints, collision policy, and the Russian CA's TLD scope. Choices persist to %APPDATA%\Theseus\extra-resolvers.json. This release is the UI shell — the resolver adapters and the setCertificateVerifyProc hook land in 0.3.96 (ENS) → 0.3.99 (Russian CA), each row's "Not wired yet" caption disappearing as its adapter ships.</div>
+
+    <div class="file">
+      <div class="n"><a href="https://dl.silentmode.st/TheseusNavigator-Setup-0.3.95.exe">TheseusNavigator-Setup-0.3.95.exe</a> — installer</div>
+      <code>eb6fa211e916d5635befe5642dda0d588b3465eafc88af084ce0fe9ff34907da</code>
+    </div>
+    <div class="file">
+      <div class="n"><a href="https://dl.silentmode.st/TheseusNavigator-0.3.95-portable.exe">TheseusNavigator-0.3.95-portable.exe</a> — portable</div>
+      <code>072005bcf83516d253da85d905a3a7a82c9f4358160f0a7cbe4bacc3a75ccc52</code>
+    </div>
+  </div>
+
   <div class="rel">
     <h2>Theseus Navigator <span style="color:var(--acid)">0.3.94</span></h2>
     <div class="meta">Windows 64-bit · unsigned · 2026-10-21 · <b>0.3.94 — home page: free-drag left area, card descriptions back</b> — The left column goes back to free positioning: each icon stores its own x,y and snaps to a 20px grid; a faint grid shows underneath while dragging so placement feels OS-desktop-like. Clicks still navigate (small move threshold distinguishes click from drag). Dropping a left icon over the right card grid re-parents it as a card; dropping a card onto the left area turns it into a free-positioned icon. Silent Mode cards get their one-line description back under the title. The add/edit modal gains a Description field.</div>
diff --git a/theseus/index.html b/theseus/index.html
index 37a6f26..a1b331b 100644
--- a/theseus/index.html
+++ b/theseus/index.html
@@ -144,15 +144,15 @@
         <h3>Theseus for Windows</h3>
         <p class="desc">Full-window desktop browser with Tor toggle, search bar, password
            vault and add-ons. macOS and Linux not yet packaged.</p>
-        <div class="meta">v0.3.94 · installer ~137 MB · portable ~137 MB · unsigned</div>
+        <div class="meta">v0.3.95 · installer ~137 MB · portable ~137 MB · unsigned</div>
         <div class="buttons">
           <a class="btn acid" href="https://dl.silentmode.st/latest/TheseusNavigator-Setup.exe">Installer</a>
           <a class="btn ghost" href="https://dl.silentmode.st/latest/TheseusNavigator-portable.exe">Portable .exe</a>
         </div>
         <div class="verifybox">
           <div class="lbl">SHA-256 — verify before running</div>
-          <div class="h"><b>Installer</b><code>f1afb9cb72880398059137a2a1667c92088220f17e791afbfeb18ef72ddbae7e</code></div>
-          <div class="h"><b>Portable</b><code>e397054775a1e03d04a05e80d2515e35d088ba66315182b25e80548580be8df4</code></div>
+          <div class="h"><b>Installer</b><code>eb6fa211e916d5635befe5642dda0d588b3465eafc88af084ce0fe9ff34907da</code></div>
+          <div class="h"><b>Portable</b><code>072005bcf83516d253da85d905a3a7a82c9f4358160f0a7cbe4bacc3a75ccc52</code></div>
         </div>
       </div>