diff --git a/package-lock.json b/package-lock.json
index ccb41c4..dfa5840 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.66",
+  "version": "1.7.67",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.66",
+      "version": "1.7.67",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index 2e852e4..f16a525 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.66",
+  "version": "1.7.67",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index ad2e076..d338e10 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,15 @@
+🏠 A real crew-owned coordinator kit
+- Added `deploy/cordn/`: Docker Compose with SQLite persistence, `.env` template,
+  backup/restore scripts, and a runbook for a crew operator.
+- The coordinator needs only outbound access to ContextVM relays — no inbound
+  port, domain or TLS terminator is required for the coordinator itself.
+- Settings → Coordinator and the crew edit form now link to the production kit;
+  the displayed Docker command is persistent instead of the old `--rm` demo.
+- The app still does not embed a coordinator. One crew-trusted coordinator is
+  the model; no multi-coordinator/BFT claims.
+
+---
+
 🎯 Value-aware safety and fresher reputation
 - High-value fixed-price listings (100,000 sats or 100 USD/EUR/GBP) now get the
   same compact safety note as new sellers: meet in public, prefer escrow for