diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 41681ec..a263bcc 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "lich",
   "description": "Claude Code plugin for the lich harness",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "author": {
     "name": "omartelo"
   }
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 28fece0..652afaa 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "lich",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Codex CLI plugin for the lich harness",
   "author": {
     "name": "omartelo"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2145e54..e4b4ac1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.17.0] - 2026-10-05
+
 ### Added
 
 - **A lich worker answers the way a native subagent does.** The worker's last
@@ -574,7 +576,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   plugin is safe to install globally. Requests time out after ~1s and errors
   are swallowed — the hook never blocks or fails the turn.
 
-[Unreleased]: https://github.com/omartelo/lich-plugin/compare/v0.16.0...HEAD
+[Unreleased]: https://github.com/omartelo/lich-plugin/compare/v0.17.0...HEAD
+[0.17.0]: https://github.com/omartelo/lich-plugin/compare/v0.16.0...v0.17.0
 [0.16.0]: https://github.com/omartelo/lich-plugin/compare/v0.15.1...v0.16.0
 [0.15.1]: https://github.com/omartelo/lich-plugin/compare/v0.15.0...v0.15.1
 [0.15.0]: https://github.com/omartelo/lich-plugin/compare/v0.14.0...v0.15.0
diff --git a/hooks/mod-control.js b/hooks/mod-control.js
index 56bcca0..fa45649 100644
--- a/hooks/mod-control.js
+++ b/hooks/mod-control.js
@@ -13,7 +13,7 @@
 // a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.16.0"
+const PLUGIN_VERSION = "0.17.0"
 
 const SETTLE_WHEN_IDLE = new Set(["prompt", "command"])
 
diff --git a/hooks/mod-usage.js b/hooks/mod-usage.js
index 10e610c..40b1910 100644
--- a/hooks/mod-usage.js
+++ b/hooks/mod-usage.js
@@ -12,7 +12,7 @@
 // refuses a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.16.0"
+const PLUGIN_VERSION = "0.17.0"
 
 /**
  * @typedef {import('claude-code').EngineInterface} Engine
diff --git a/hooks/report-session-start.sh b/hooks/report-session-start.sh
index 1e2aeab..18dc1ca 100755
--- a/hooks/report-session-start.sh
+++ b/hooks/report-session-start.sh
@@ -7,7 +7,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.16.0
+plugin_version=0.17.0
 provider=${1:-claude}
 # Parse session_id from the stdin payload. Prefer jq; fall back to sed so the
 # hook works on Windows, where jq is usually absent but sed (Git Bash) is not.
diff --git a/hooks/report-state.sh b/hooks/report-state.sh
index bd4599c..c7dcaf5 100755
--- a/hooks/report-state.sh
+++ b/hooks/report-state.sh
@@ -7,7 +7,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.16.0
+plugin_version=0.17.0
 
 state=$1
 body="{\"session_id\":\"${LICH_SESSION_ID}\",\"state\":\"${state}\"}"
diff --git a/hooks/report-title.sh b/hooks/report-title.sh
index 490cd2c..8fcc5b9 100755
--- a/hooks/report-title.sh
+++ b/hooks/report-title.sh
@@ -11,7 +11,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.16.0
+plugin_version=0.17.0
 command -v jq >/dev/null 2>&1 || exit 0
 
 # Checked before stdin is read, because it is the whole point: finding a title
diff --git a/hooks/report-tool.sh b/hooks/report-tool.sh
index 7cfb969..bd38d0d 100755
--- a/hooks/report-tool.sh
+++ b/hooks/report-tool.sh
@@ -11,7 +11,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.16.0
+plugin_version=0.17.0
 
 here=$(dirname "$0")
 payload=$(cat)
diff --git a/hooks/report-touched.sh b/hooks/report-touched.sh
index 006b58c..4d424e0 100755
--- a/hooks/report-touched.sh
+++ b/hooks/report-touched.sh
@@ -6,7 +6,7 @@
 [ -n "$LICH_PORT" ] && [ -n "$LICH_TOKEN" ] && [ -n "$LICH_SESSION_ID" ] || exit 0
 
 # Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-plugin_version=0.16.0
+plugin_version=0.17.0
 
 curl -s -o /dev/null --max-time 1 \
   -X POST "http://127.0.0.1:${LICH_PORT}/session-touched?token=${LICH_TOKEN}" \
diff --git a/hooks/worker-answer.js b/hooks/worker-answer.js
index 9b71a3c..23bc838 100644
--- a/hooks/worker-answer.js
+++ b/hooks/worker-answer.js
@@ -22,7 +22,7 @@
 // refuses a module that hands `$` to a nested function.
 
 // Sent as X-Lich-Plugin on every request; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.16.0"
+const PLUGIN_VERSION = "0.17.0"
 
 // The value lich spawns a `--subagent` session with.
 const CARDS_OFF = "off"
diff --git a/omp/lich.js b/omp/lich.js
index cbdf27e..eb1526f 100644
--- a/omp/lich.js
+++ b/omp/lich.js
@@ -24,7 +24,7 @@
 // environment is read per report rather than at import, so a module loaded
 // outside lich stays a no-op instead of a cached decision.
 // Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.16.0"
+const PLUGIN_VERSION = "0.17.0"
 
 function report(path, body) {
   const port = process.env.LICH_PORT
diff --git a/opencode/lich.js b/opencode/lich.js
index 25a74b0..9c53f76 100644
--- a/opencode/lich.js
+++ b/opencode/lich.js
@@ -11,7 +11,7 @@
 // environment is read per report rather than at import, so a module loaded
 // outside lich stays a no-op instead of a cached decision.
 // Sent as X-Lich-Plugin on every report; bumped at release (CLAUDE.md, Release).
-const PLUGIN_VERSION = "0.16.0"
+const PLUGIN_VERSION = "0.17.0"
 
 function report(path, body) {
   const port = process.env.LICH_PORT
diff --git a/tests/lich-ref b/tests/lich-ref
index 9dfb51f..4eb38d1 100644
--- a/tests/lich-ref
+++ b/tests/lich-ref
@@ -1 +1 @@
-v0.59.0
+v0.60.0
diff --git a/tests/refresh-fixtures.sh b/tests/refresh-fixtures.sh
index cba90d8..ad7b841 100755
--- a/tests/refresh-fixtures.sh
+++ b/tests/refresh-fixtures.sh
@@ -18,15 +18,8 @@ ref=$(tr -d '[:space:]' <"$here/lich-ref")
 base=https://raw.githubusercontent.com/omartelo/lich/$ref/docs/hooks/fixtures
 
 for file in session-state.jsonl session-start.jsonl session-title.jsonl \
-  session-touched.jsonl mod-usage.jsonl mod-control.jsonl mod-commands.json; do
+  session-touched.jsonl mod-usage.jsonl mod-control.jsonl mod-commands.json \
+  mod-answer.jsonl; do
   curl -fsSL "$base/$file" -o "$here/fixtures/$file"
   echo "refreshed $file at $ref"
 done
-
-# The mod-answer contract is in no lich release yet: its fixture is read at the
-# commit of lich's feat/worker-auto-answer branch that adds it, and folds into
-# the list above once a release ships it.
-answer=274b3d514ea18c0fd68c1da578de1c0b65ef8af0
-curl -fsSL "https://raw.githubusercontent.com/omartelo/lich/$answer/docs/hooks/fixtures/mod-answer.jsonl" \
-  -o "$here/fixtures/mod-answer.jsonl"
-echo "refreshed mod-answer.jsonl at $answer (unreleased)"