diff --git a/README.md b/README.md
index ef9e760..11d2473 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,7 @@ router, handlers, HTML, authorization decisions, cache behavior, and
 deployment. Adopt one boundary at a time; Go compiles and links only the
 packages you import.
 
-> **Public preview:** `v0.1.0-preview.27`. APIs may change before a stable
+> **Public preview:** `v0.1.0-preview.28`. APIs may change before a stable
 > release. Linux is the maintained release platform.
 
 ## Why Web Foundations?
@@ -60,14 +60,14 @@ owns—and, just as importantly, what remains application policy.
 Pin the preview in an application module:
 
 ```bash
-go get gamertan.com/web@v0.1.0-preview.27
+go get gamertan.com/web@v0.1.0-preview.28
 go mod verify
 ```
 
 An application may name the first package it intends to adopt:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.27
+go get gamertan.com/web/requestmeta@v0.1.0-preview.28
 ```
 
 The version belongs to the `gamertan.com/web` module. See the
diff --git a/authmail/README.md b/authmail/README.md
index 01859ac..d0e9bf6 100644
--- a/authmail/README.md
+++ b/authmail/README.md
@@ -79,5 +79,8 @@ Local tests cover both confirmation orders, replay/expiry, generic reset request
 credential/session races, competing resets, address conflicts, stable ownership,
 retained factors, invitation handling, rate limits, restart and transactional
 migration/audit/outbox rollback. The account packages and mail/outbox suites pass;
-focused races and vet pass. Consumer HTTP/UI integration, release/publication and
-controlled real-mail proof remain pending in the repository queue.
+focused races and vet pass. The preview28 consumer dogfood also covers native
+HTTP/UI integration and real BHS inbox verification/reset/both-mailbox flows.
+Each application must still verify its own sender configuration, recipient
+delivery and recovery operations; local provider proof is not an assurance of
+external spam placement or mail reputation.
diff --git a/docs/GETTING_STARTED.md b/docs/GETTING_STARTED.md
index cd39f5e..3a53240 100644
--- a/docs/GETTING_STARTED.md
+++ b/docs/GETTING_STARTED.md
@@ -26,7 +26,7 @@ The packages are ordinary Go imports. Pin the current preview and verify its
 module checksum:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.27
+go get gamertan.com/web/requestmeta@v0.1.0-preview.28
 go mod verify
 ```