diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index a785d763b..a2914e522 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "3.16.2"
+  ".": "3.17.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 36c15385c..a9d5380a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.17.0](https://github.com/dinglebear-ai/cortex/compare/v3.16.2...v3.17.0) (2026-09-24)
+
+
+### Added
+
+* add first-class install-cortex skill ([#249](https://github.com/dinglebear-ai/cortex/issues/249)) ([f708c51](https://github.com/dinglebear-ai/cortex/commit/f708c5118d3347531edc57220e9646512a30f94e))
+* **cortex:** expose bounded graph inventory and changes ([00ce2fa](https://github.com/dinglebear-ai/cortex/commit/00ce2fa5c311df8ddae247dbf955abf9052037d7))
+* **cortex:** page session inventory metadata ([2155f23](https://github.com/dinglebear-ai/cortex/commit/2155f23f9a205bbdff4085229025eb919ee821b7))
+
+
+### Fixed
+
+* harden ingestion, recovery, and review qualification ([#244](https://github.com/dinglebear-ai/cortex/issues/244)) ([4455dc4](https://github.com/dinglebear-ai/cortex/commit/4455dc430c787984c2c8ee12246b2bd7e46a77a0))
+* **ingest:** remediate comprehensive review findings ([#246](https://github.com/dinglebear-ai/cortex/issues/246)) ([12a41e9](https://github.com/dinglebear-ai/cortex/commit/12a41e9645ad17f121000bd1c4c4adb27fd6d88d))
+* recover forwarded Claude skills and scope session search ([#248](https://github.com/dinglebear-ai/cortex/issues/248)) ([3b9855e](https://github.com/dinglebear-ai/cortex/commit/3b9855e01d0f539d24977731aafdb36ca5a78dd0))
+* repair transcript skill evidence and search ([#247](https://github.com/dinglebear-ai/cortex/issues/247)) ([03ba04d](https://github.com/dinglebear-ai/cortex/commit/03ba04dfd406f1c9511a4bbd540d32e2002d973d))
+
 ## [3.16.2](https://github.com/dinglebear-ai/cortex/compare/v3.16.1...v3.16.2) (2026-09-11)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 6c891735c..522ebed2c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -534,7 +534,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
 [[package]]
 name = "cortex"
-version = "3.16.2"
+version = "3.17.0"
 dependencies = [
  "anyhow",
  "async-stream",
@@ -4526,7 +4526,7 @@ checksum = "1ffae5123b2d3fc086436f8834ae3ab053a283cfac8fe0a0b8eaae044768a4c4"
 
 [[package]]
 name = "xtask"
-version = "3.16.2"
+version = "3.17.0"
 dependencies = [
  "anyhow",
  "clap",
diff --git a/Cargo.toml b/Cargo.toml
index c0dad6e92..0971f00f1 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -41,7 +41,7 @@ missing_safety_doc = "deny"
 
 [package]
 name = "cortex"
-version = "3.16.2"
+version = "3.17.0"
 edition.workspace = true
 rust-version.workspace = true
 authors.workspace = true
diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml
index caee0a5be..7070b0fe9 100644
--- a/docker-compose.prod.yml
+++ b/docker-compose.prod.yml
@@ -23,7 +23,7 @@ services:
     # Default tag is kept in sync by `cargo xtask bump-version` (version canon);
     # previously this was frozen at 1.0.0 while migrations moved forward —
     # a stale binary against a newer schema (full-review OH1).
-    image: ghcr.io/dinglebear-ai/cortex:${CORTEX_VERSION:-3.16.2}
+    image: ghcr.io/dinglebear-ai/cortex:${CORTEX_VERSION:-3.17.0}
     container_name: cortex
     user: "${CORTEX_UID:-1000}:${CORTEX_GID:-1000}"
     group_add:
diff --git a/mcpb/manifest.json b/mcpb/manifest.json
index 8cde2101c..0a9120bda 100644
--- a/mcpb/manifest.json
+++ b/mcpb/manifest.json
@@ -3,7 +3,7 @@
   "manifest_version": "0.4",
   "name": "cortex",
   "display_name": "Cortex",
-  "version": "3.16.2",
+  "version": "3.17.0",
   "description": "Self-hosted log aggregation and investigation for homelabs: syslog, Docker, OTLP, and AI transcripts in SQLite/FTS, exposed over MCP, CLI, and REST.",
   "long_description": "cortex packages the existing cortex stdio entrypoint as a local MCP Bundle. It is query-only: it reads the configured SQLite database and does not start syslog listeners, HTTP servers, Docker Compose, REST, or deploy flows.",
   "author": {
diff --git a/packages/cortex-rmcp/package.json b/packages/cortex-rmcp/package.json
index 75ef696dd..5311802fe 100644
--- a/packages/cortex-rmcp/package.json
+++ b/packages/cortex-rmcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@dinglebear/cortex",
-  "version": "3.16.2",
+  "version": "3.17.0",
   "license": "AGPL-3.0-only",
   "description": "Self-hosted log aggregation and investigation for homelabs: syslog, Docker, OTLP, and AI transcripts in SQLite/FTS, exposed over MCP, CLI, and REST.",
   "homepage": "https://github.com/dinglebear-ai/cortex#readme",
@@ -55,7 +55,7 @@
     "llm"
   ],
   "mcpName": "ai.dinglebear/cortex",
-  "binaryVersion": "3.16.2",
+  "binaryVersion": "3.17.0",
   "author": {
     "name": "dinglebear.ai",
     "url": "https://dinglebear.ai"
diff --git a/server.json b/server.json
index afea76e58..aceebd705 100644
--- a/server.json
+++ b/server.json
@@ -3,7 +3,7 @@
   "name": "ai.dinglebear/cortex",
   "title": "Cortex RMCP",
   "description": "Self-hosted homelab log intelligence over MCP, CLI, and REST with SQLite/FTS.",
-  "version": "3.16.2",
+  "version": "3.17.0",
   "websiteUrl": "https://github.com/dinglebear-ai/cortex",
   "repository": {
     "url": "https://github.com/dinglebear-ai/cortex",
@@ -25,7 +25,7 @@
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@dinglebear/cortex",
-      "version": "3.16.2",
+      "version": "3.17.0",
       "runtimeHint": "npx",
       "packageArguments": [
         {
@@ -67,7 +67,7 @@
           "format": "string",
           "isRequired": false,
           "isSecret": false,
-          "placeholder": "v3.16.2"
+          "placeholder": "v3.17.0"
         },
         {
           "name": "CORTEX_RMCP_REPO",
@@ -105,12 +105,12 @@
       "namespace": "ai.dinglebear",
       "dnsDomain": "dinglebear.ai",
       "distribution": {
-        "npm": "@dinglebear/cortex@3.16.2",
+        "npm": "@dinglebear/cortex@3.17.0",
         "nodePackage": "@dinglebear/cortex",
-        "ociImage": "ghcr.io/dinglebear-ai/cortex:v3.16.2"
+        "ociImage": "ghcr.io/dinglebear-ai/cortex:v3.17.0"
       },
       "buildInfo": {
-        "version": "3.16.2",
+        "version": "3.17.0",
         "repository": "https://github.com/dinglebear-ai/cortex"
       }
     }
diff --git a/tests/live/services/oauth/Cargo.lock b/tests/live/services/oauth/Cargo.lock
index e0b47299d..63bf543da 100644
--- a/tests/live/services/oauth/Cargo.lock
+++ b/tests/live/services/oauth/Cargo.lock
@@ -434,7 +434,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
 [[package]]
 name = "cortex"
-version = "3.16.2"
+version = "3.17.0"
 dependencies = [
  "anyhow",
  "async-stream",
diff --git a/tests/live/surface-exporter/Cargo.lock b/tests/live/surface-exporter/Cargo.lock
index 1d657e60b..7d5e0e679 100644
--- a/tests/live/surface-exporter/Cargo.lock
+++ b/tests/live/surface-exporter/Cargo.lock
@@ -434,7 +434,7 @@ checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
 [[package]]
 name = "cortex"
-version = "3.16.2"
+version = "3.17.0"
 dependencies = [
  "anyhow",
  "async-stream",
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index 5189cf3d0..83b0702a7 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "xtask"
-version = "3.16.2"
+version = "3.17.0"
 edition.workspace = true
 rust-version.workspace = true
 authors.workspace = true