diff --git a/.fullsend/config.yaml b/.fullsend/config.yaml
index e5c0c0b..7d6dcd2 100644
--- a/.fullsend/config.yaml
+++ b/.fullsend/config.yaml
@@ -10,6 +10,7 @@ version: "1"
 agents:
     - name: grillme
       source: custom/harness/grillme.yaml
+      model: claude-opus-4-6
 roles:
     - triage
     - coder
diff --git a/.fullsend/custom/harness/grillme.yaml b/.fullsend/custom/harness/grillme.yaml
index 613bc36..edcaeef 100644
--- a/.fullsend/custom/harness/grillme.yaml
+++ b/.fullsend/custom/harness/grillme.yaml
@@ -15,7 +15,7 @@ readonly_repo: true
 role: review
 slug: fullsend-ai-review
 
-model: opus
+model: claude-opus-4-6
 
 providers:
   - vertex-ai
diff --git a/.fullsend/custom/policies/grillme.yaml b/.fullsend/custom/policies/grillme.yaml
index 41268b7..c13cffd 100644
--- a/.fullsend/custom/policies/grillme.yaml
+++ b/.fullsend/custom/policies/grillme.yaml
@@ -33,6 +33,8 @@ network_policies:
         access: read-write
     binaries:
       - path: "**/claude"
+      # Claude Code 2.1+ ships the bun compile as claude.exe; **/claude does not match it.
+      - path: "**/claude.exe"
       - path: "**/node"
 
   github_api:
diff --git a/.github/workflows/fullsend.yaml b/.github/workflows/fullsend.yaml
index 92c5e93..464d555 100644
--- a/.github/workflows/fullsend.yaml
+++ b/.github/workflows/fullsend.yaml
@@ -45,7 +45,7 @@ jobs:
       issues: write
       packages: read
       pull-requests: write
-    uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@65ceb961020290e43b008daa380765b44f35c5df # v0.36.0
+    uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@d9e8bec726f85e0cfd1aeca44252030135a5b1d1 # v0.39.0
     with:
       event_action: ${{ github.event.action }}
       install_mode: per-repo