diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7688062..b891dcc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,12 @@ Note: this version tracks the **tap**, not OpSentry itself. The OpSentry version
 given formula installs is recorded in each entry below and lives in
 [`Formula/opsentry.rb`](Formula/opsentry.rb).
 
+## [0.2.1] - 2026-09-17
+
+### Fixed
+- Bumped the formula to OpSentry `v1.8.7` with a recomputed `sha256`, so `brew install opsentry` serves the current release.
+  Opened automatically by the `bump-formula` workflow.
+
 ## [0.2.0] - 2026-08-03
 
 ### Added
diff --git a/Formula/opsentry.rb b/Formula/opsentry.rb
index d5c411b..81cd57f 100644
--- a/Formula/opsentry.rb
+++ b/Formula/opsentry.rb
@@ -7,8 +7,8 @@
 class Opsentry < Formula
   desc "AI agent security guardrails for engineering teams"
   homepage "https://github.com/opsight-intelligence/opsentry"
-  url "https://github.com/opsight-intelligence/opsentry/archive/refs/tags/v1.8.4.tar.gz"
-  sha256 "f80e8bb8536278d3890a39b82da85957742ddaa2d93e3b7d9474586549c1e526"
+  url "https://github.com/opsight-intelligence/opsentry/archive/refs/tags/v1.8.7.tar.gz"
+  sha256 "beb281236a4447259e36149df4b693d59ec19fd7cac76a132e7c5fb558966a8f"
   license "Apache-2.0"
 
   depends_on "jq"
diff --git a/VERSION b/VERSION
index 0ea3a94..0c62199 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.2.0
+0.2.1