diff --git a/package-lock.json b/package-lock.json
index 79c046b..39f9688 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.71",
+  "version": "1.7.72",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.71",
+      "version": "1.7.72",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index 2d9eaa9..dbdded9 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.71",
+  "version": "1.7.72",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index 40ea50d..337edd8 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,14 @@
+🛡️ Verify before showing, and stop leaking referrers
+- The shared skate-content query path now verifies every relay event's id and
+  signature before merge/display. Trust-sensitive reads no longer rely on the
+  relay implementation to have checked it.
+- User images and avatars now use `referrerPolicy="no-referrer"`; the site
+  Referrer-Policy is `no-referrer` too, so third-party image hosts do not learn
+  which SkateSpots page you came from.
+- These are defense-in-depth changes; no new user prompt or gate.
+
+---
+
 🎯 Status control no longer crowds the header
 - The desktop status control is now a compact emoji-only round chip with a
   tooltip, instead of a text pill that could collide with the profile controls.