diff --git a/Taskfile.yml b/Taskfile.yml
index 2137cab..6be6e2e 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -30,8 +30,8 @@ vars:
   # Pinned by version and by content, for the reason the kernel used to be pinned by hash:
   # "which machine did this lane certify?" needs an answer that is not "whatever was
   # published that day". Bump both together and say in the commit why the machine changed.
-  SPIN_MACHINE_VERSION: '{{.SPIN_MACHINE_VERSION | default "v20260907.01"}}'
-  SPIN_MACHINE_SHA256: '{{.SPIN_MACHINE_SHA256 | default "72db5f9789a37370acaac25bf0aab2490f9b0fa0ee846a65f80651408bb0da47"}}'
+  SPIN_MACHINE_VERSION: '{{.SPIN_MACHINE_VERSION | default "v20260908.02"}}'
+  SPIN_MACHINE_SHA256: '{{.SPIN_MACHINE_SHA256 | default "835c193745db13d3dcbaa4574fa471d967335fc4249302de6e0489dfaba02bdb"}}'
   # A sibling checkout that has already built one wins over the published release.
   SPIN_MACHINE_DIR: '{{.SPIN_MACHINE_DIR | default "../spin-machine"}}'