diff --git a/README.md b/README.md
index 6eac681..e0ee396 100644
--- a/README.md
+++ b/README.md
@@ -37,7 +37,7 @@ through a browser-based terminal.
 
 | Field | Value |
 | --- | --- |
-| Spaces image | `docker.io/horologger/spaces` |
+| Spaces image | `docker.io/horologger/spaces:v0.2.1a` |
 | Subspaces image | `docker.io/horologger/subs:v0.1.2` |
 | Certrelay image | `docker.io/horologger/certrelay:v0.2.5` |
 | Nacho image | `docker.io/horologger/nacho:v1.0.0` |
@@ -250,7 +250,7 @@ spaces balance
 package_id: spaces
 upstream_version: subspacesplus
 images:
-  spaces: docker.io/horologger/spaces:v0.2.1
+  spaces: docker.io/horologger/spaces:v0.2.1a
   subspaces: docker.io/horologger/subs:v0.1.2
   certrelay: docker.io/horologger/certrelay:v0.2.5
   nacho: docker.io/horologger/nacho:v1.0.0
@@ -285,6 +285,8 @@ spaced_env_vars:
   - BTC_RPC_PASSWORD
   - APP_USER
   - APP_PASSWORD
+spaces:
+  image: horologger/spaces:v0.2.1a   # spaced, space-cli, gotty (terminal image)
 subspaces:
   default_enabled: false   # opt-in via Enable Subspaces action
   store_field: enableSubspaces
diff --git a/instructions.md b/instructions.md
index 7837724..91e70a4 100644
--- a/instructions.md
+++ b/instructions.md
@@ -61,6 +61,10 @@ spaces walletbalance default
 ## Limitations
 
 - **Mainnet only.** No testnet, signet, or regtest.
+- **Container images** (see also the package manifest): the `spaced` runtime uses
+  `horologger/spaces:v0.2.1a`; Subspaces, Certrelay, and Nacho use
+  `horologger/subs:v0.1.2`, `horologger/certrelay:v0.2.5`, and
+  `horologger/nacho:v1.0.0`.
 - The image's `docker_entrypoint.sh` is not used. `spaced` is managed by
   StartOS, not started inside a `screen` session by login.
 - The only externally bound port is `8080` (gotty). Spaced RPC stays on
diff --git a/startos/manifest/index.ts b/startos/manifest/index.ts
index d27c718..9afe9d5 100644
--- a/startos/manifest/index.ts
+++ b/startos/manifest/index.ts
@@ -14,7 +14,7 @@ export const manifest = setupManifest({
   volumes: ['main'],
   images: {
     spaces: {
-      source: { dockerTag: 'horologger/spaces:v0.2.1' },
+      source: { dockerTag: 'horologger/spaces:v0.2.1a' },
       arch: ['x86_64', 'aarch64'],
     },
     subspaces: {
diff --git a/startos/versions/current.ts b/startos/versions/current.ts
index 27d895c..22948a6 100644
--- a/startos/versions/current.ts
+++ b/startos/versions/current.ts
@@ -3,7 +3,7 @@ import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk'
 export const current = VersionInfo.of({
   version: '0.2.1:3',
   releaseNotes: {
-    en_US: `Packaging-only revision — no upstream image changes (\`spaces:v0.2.1\`, \`subs:v0.1.2\`, \`certrelay:v0.2.5\`, \`nacho:v1.0.0\`).
+    en_US: `**Spaces image** pinned to \`horologger/spaces:v0.2.1a\` (other images unchanged: \`subs:v0.1.2\`, \`certrelay:v0.2.5\`, \`nacho:v1.0.0\`).
 
 **Fix:** the Space-CLI web terminal no longer runs \`monitor\` on every login. The MOTD heredoc in \`.bashrc\` now uses a quoted delimiter so backticks in the banner (e.g. around \`monitor\`) are printed literally instead of executing command substitution.