diff --git a/theseus/index.html b/theseus/index.html
index 69dbf89..e1aa61a 100644
--- a/theseus/index.html
+++ b/theseus/index.html
@@ -225,7 +225,7 @@
 
 <section id="download">
   <h2>Download</h2>
-  <p class="lede">Latest is <b>0.0.9</b>. Windows installer + portable, and an
+  <p class="lede">Latest is <b data-live="theseus-version">0.3.48</b>. Windows installer + portable, and an
      Android build (Ariadne mobile — same brand, phone form factor).</p>
 
   <div class="plats">
@@ -235,14 +235,14 @@
       <h3>Theseus for Windows</h3>
       <p>Full-window desktop browser with Tor toggle and the multi-source BNS
         warm-start.</p>
-      <div class="meta">v0.3.44 · installer ~118 MB (bundles Ariadne's Thread) · portable ~117 MB · unsigned</div>
+      <div class="meta">v<span data-live="theseus-version">0.3.48</span> · installer ~99 MB · portable ~99 MB · unsigned</div>
       <div class="btns">
-        <a class="btn acid"  href="https://dl.silentmode.st/TheseusNavigator-Setup-0.3.44.exe">Installer</a>
-        <a class="btn ghost" href="https://dl.silentmode.st/TheseusNavigator-0.3.44-portable.exe">Portable .exe</a>
+        <a class="btn acid"  href="https://dl.silentmode.st/latest/TheseusNavigator-Setup.exe">Installer</a>
+        <a class="btn ghost" href="https://dl.silentmode.st/latest/TheseusNavigator-portable.exe">Portable .exe</a>
       </div>
       <div class="hashes" id="hashes-win">
-        <div class="h"><b>Installer</b><code>6dd510184a3c1488ac93b7fd0194ddd239fe4e31083705afcc3c7bde0f530107</code></div>
-        <div class="h"><b>Portable</b><code>346be24804db0d8a00cd76a2c89cd3bd2b9af17e5505b25ec326f30c3ceec6ad</code></div>
+        <div class="h"><b>Installer</b><code data-live="theseus-setup-sha">ce5064decdd796e560e11f161d2e9271d3cd7de3bd231c942ebc2de407d0c9f7</code></div>
+        <div class="h"><b>Portable</b><code data-live="theseus-portable-sha">e758c1f9a9ec376c029856fd81ed3cee4b2c848a4cf9f94d07ed74f2096ad621</code></div>
       </div>
     </div>
 
@@ -251,12 +251,12 @@
       <h3>Ariadne for Android</h3>
       <p>Phone-sized browser with tap-to-verify provenance — the block and
         transaction behind each name are one tap away.</p>
-      <div class="meta">v0.18 · ~146 KB · self-signed release key · in-app auto-update</div>
+      <div class="meta">v<span data-live="android-version">0.18</span> · ~146 KB · self-signed release key · in-app auto-update</div>
       <div class="btns">
-        <a class="btn acid" href="https://dl.silentmode.st/ariadne-v0.18.apk">Download APK</a>
+        <a class="btn acid" href="https://dl.silentmode.st/latest/ariadne.apk">Download APK</a>
       </div>
       <div class="hashes" id="hashes-android">
-        <div class="h"><b>APK</b><code>8a655081782ecc17a50a7fcd67c28625ccb0c905cf6b583bdd703a128b2b9b10</code></div>
+        <div class="h"><b>APK</b><code data-live="android-sha">920272deb1ff3cb163d609882f4fdaf422c163648b96944d16670ba0ba2ac5bf</code></div>
         <div class="h"><b>Signing key</b><code>46ebbbe5dc73148d66410fd0337b1e6683472128c983e8e2578200b9e3ca548c</code></div>
       </div>
     </div>
@@ -264,7 +264,9 @@
   </div>
 
   <div class="note"><b>Nothing is signed by an authority your device trusts</b>
-    — by design. Verify the SHA-256 below before running. The machine-readable
+    — by design. Verify the SHA-256 below before running. The download buttons point at
+    <code>dl.silentmode.st/latest/…</code>, which always redirects to the current
+    build, so a saved link never goes stale. The machine-readable
     manifest is at
     <a href="https://dl.silentmode.st/releases-manifest.json">releases-manifest.json</a>.</div>
 </section>
@@ -277,13 +279,13 @@
      <code>releases.silentmode.bch</code> pointer. Three independent surfaces —
      they should all agree.</p>
 <pre>Windows PowerShell:
-  Get-FileHash TheseusNavigator-Setup-0.0.9.exe -Algorithm SHA256
+  Get-FileHash <span data-live="theseus-setup-file">TheseusNavigator-Setup-0.3.48.exe</span> -Algorithm SHA256
 
 macOS / Linux:
-  sha256sum TheseusNavigator-Setup-0.0.9.exe
+  sha256sum <span data-live="theseus-setup-file">TheseusNavigator-Setup-0.3.48.exe</span>
 
 Expected:
-  5452a34f211176cf04b7ea77a70fb838f0031b6ea0faed2cd270eae989b20c60</pre>
+  <span data-live="theseus-setup-sha">ce5064decdd796e560e11f161d2e9271d3cd7de3bd231c942ebc2de407d0c9f7</span></pre>
 </section>
 
 <footer>
@@ -294,5 +296,34 @@ Expected:
 
 </div>
 
+
+<script>
+// Keep versions + hashes current from the releases manifest. The text baked
+// into the page is the fallback when this fetch can't run (offline, or a
+// scheme that blocks cross-origin reads).
+(async () => {
+  try {
+    const r = await fetch("https://dl.silentmode.st/releases-manifest.json", { cache: "no-store" });
+    if (!r.ok) return;
+    const m = await r.json();
+    const th = (m.releases || []).find((x) => x.id === "theseus-navigator");
+    const an = (m.releases || []).find((x) => x.id === "ariadne-android");
+    const set = (key, val) => { if (val == null) return; document.querySelectorAll('[data-live="' + key + '"]').forEach((el) => { el.textContent = String(val); }); };
+    if (th) {
+      const files = Object.keys(th.files || {});
+      const setup = files.find((f) => /Setup-.*\.exe$/.test(f)), portable = files.find((f) => /-portable\.exe$/.test(f));
+      set("theseus-version", th.version);
+      set("theseus-setup-file", setup);
+      set("theseus-setup-sha", setup && th.files[setup]);
+      set("theseus-portable-sha", portable && th.files[portable]);
+    }
+    if (an) {
+      const apk = Object.keys(an.files || {})[0];
+      set("android-version", an.version);
+      set("android-sha", apk && an.files[apk]);
+    }
+  } catch {}
+})();
+</script>
 </body>
 </html>
diff --git a/tools/index.html b/tools/index.html
index cef8c6a..1c9c1af 100644
--- a/tools/index.html
+++ b/tools/index.html
@@ -123,8 +123,8 @@
            macOS and Linux not yet packaged.</p>
         <div class="meta">v0.3.48 · installer ~99 MB · portable ~99 MB · unsigned</div>
         <div class="buttons">
-          <a class="btn acid" href="https://dl.silentmode.st/TheseusNavigator-Setup-0.3.48.exe">Installer</a>
-          <a class="btn ghost" href="https://dl.silentmode.st/TheseusNavigator-0.3.48-portable.exe">Portable .exe</a>
+          <a class="btn acid" href="https://dl.silentmode.st/latest/TheseusNavigator-Setup.exe">Installer</a>
+          <a class="btn ghost" href="https://dl.silentmode.st/latest/TheseusNavigator-portable.exe">Portable .exe</a>
         </div>
         <div class="verifybox">
           <div class="lbl">SHA-256 — verify before running</div>
@@ -140,7 +140,7 @@
            and transaction behind each name are one tap away.</p>
         <div class="meta">v0.18 · ~146 KB · self-signed release key · in-app auto-update</div>
         <div class="buttons">
-          <a class="btn acid" href="https://dl.silentmode.st/ariadne-v0.18.apk">Download APK</a>
+          <a class="btn acid" href="https://dl.silentmode.st/latest/ariadne.apk">Download APK</a>
         </div>
         <div class="verifybox">
           <div class="lbl">SHA-256 — verify before installing</div>
@@ -248,7 +248,7 @@
       <div class="meta">Windows 64-bit · v0.1.2 · bundled Node runtime · unsigned build</div>
     </div>
     <div class="act">
-      <a class="btn" href="https://dl.silentmode.st/AriadneResolver-Setup-0.1.2.exe">Installer</a>
+      <a class="btn" href="https://dl.silentmode.st/latest/AriadneResolver-Setup.exe">Installer</a>
     </div>
     <div class="hashes">
       <div style="color:var(--mut);font-size:12.5px">SHA-256 — verify before elevating:</div>