fix: name the version this page describes, and the one it wraps

src/data/benchmark.ts

@@ -16,6 +16,16 @@ export const RUN = {
   toolVersion: '0.1.0',
 } as const;
 
+/**
+ * The version this site describes, which is the one npm serves.
+ *
+ * Deliberately not `RUN.toolVersion`. That one says which build produced the
+ * measurements and must not move when a release happens, or the numbers would
+ * start claiming to come from a run nobody made. This one says what a reader
+ * would install today. They were the same version once and are not any more.
+ */
+export const CURRENT_VERSION = '0.2.0';
+
 /** The thresholds the package actually ships with, from src/policy/schema.ts. */
 export const SHIPPED = {
   annotateInstructs: 0.5,

src/layouts/Base.astro

@@ -1,5 +1,5 @@
 ---
-import { RUN, REPO, NPM } from '../data/benchmark';
+import { RUN, REPO, NPM, CURRENT_VERSION } from '../data/benchmark';
 
 interface Props {
   readonly title: string;
@@ -129,8 +129,9 @@ const year = new Date().getFullYear();
         </div>
       </div>
       <p class="provenance">
-        This page describes agent-chaperone {RUN.toolVersion}. The measured numbers are one run of{' '}
-        <code>{RUN.model}</code> on {RUN.date}. Copyright {year}, Apache-2.0.
+        This page describes agent-chaperone {CURRENT_VERSION}. The measured numbers are one run of{' '}
+        <code>{RUN.model}</code> against {RUN.toolVersion} on {RUN.date}. Copyright {year},
+        Apache-2.0.
       </p>
     </footer>
   </body>

src/pages/index.astro

@@ -85,9 +85,10 @@ const description =
       </a>
     </h2>
     <p>
-      The first is a proxy. One change to a client's MCP configuration wraps a stdio server, and
-      every tool call and result crossing it is screened. Everything after <code>--</code> is the
-      server that would have run anyway.
+      The first is a proxy. One change to a client's MCP configuration wraps a server, whether it
+      runs as a local process or answers over HTTP somewhere else, and every tool call and result
+      crossing it is screened. Everything after <code>--</code> is the server that would have run
+      anyway, or the URL of one already running.
     </p>
     <pre><code>{`{
   "mcpServers": {