diff --git a/docs/versioning.md b/docs/versioning.md
index a316884..68d6ea3 100644
--- a/docs/versioning.md
+++ b/docs/versioning.md
@@ -63,7 +63,7 @@ Values from [versions.env](../versions.env) at the current identity:
 | DSH ref | `dsh-v0.2.1-rc.5` | `DSH_VERSION` |
 | Repository revision | `(empty)` | `RELEASE_REVISION` |
 | pnpm | `11.28.5` | `PNPM_VERSION` |
-| agent-sandbox (CRDs) | `v1.0.8` | `AGENT_SANDBOX_VERSION`, used by the examples and CI dry-run |
+| agent-sandbox (CRDs) | `v1.0.9` | `AGENT_SANDBOX_VERSION`, used by the examples and CI dry-run |
 | Kubernetes Gateway API | `v1.2.1` | `GATEWAY_API_VERSION`, used by the SSO exposure variant |
 | oauth2-proxy | `quay.io/oauth2-proxy/oauth2-proxy:v7.15.5` | `OAUTH2_PROXY_IMAGE` |
 | Main image | `ghcr.io/sredevopsorg/deepseek-kubernetes-sandbox` | `GHCR_IMAGE` |
diff --git a/examples/dsh-agents-as-a-service/docs/optional-hardening.md b/examples/dsh-agents-as-a-service/docs/optional-hardening.md
index 46a38ce..b007f9f 100644
--- a/examples/dsh-agents-as-a-service/docs/optional-hardening.md
+++ b/examples/dsh-agents-as-a-service/docs/optional-hardening.md
@@ -484,7 +484,7 @@ The Sandbox, its claim and its PVC survive, but nothing runs: the gateway keeps
 proxying to a dead Pod and every request fails until someone deletes the Pod or
 the claim.
 
-agent-sandbox v1.0.8 (the pin in [versions.env](../../../versions.env)) adds
+agent-sandbox v1.0.8+ (the current pin in [versions.env](../../../versions.env) is newer) adds
 `spec.failedPodPolicy` to `Sandbox` and to `SandboxTemplate`:
 
 | Value | Behavior |
diff --git a/versions.env b/versions.env
index c7feea8..9746453 100644
--- a/versions.env
+++ b/versions.env
@@ -16,7 +16,7 @@ PNPM_VERSION=11.28.5
 RELEASE_REVISION=
 
 # Control-plane versions used by the examples and their manifests.
-AGENT_SANDBOX_VERSION=v1.0.8
+AGENT_SANDBOX_VERSION=v1.0.9
 GATEWAY_API_VERSION=v1.2.1
 OAUTH2_PROXY_IMAGE=quay.io/oauth2-proxy/oauth2-proxy:v7.15.5