diff --git a/specs/shorashim_architecture.md b/specs/shorashim_architecture.md
index f6904390..08f5ae63 100644
--- a/specs/shorashim_architecture.md
+++ b/specs/shorashim_architecture.md
@@ -345,12 +345,15 @@ The engine carries no data files of its own. The roots and the Torah
 references are in L1 (`l1/torah/`, found through `L1_MOUNT_POINT`) and
 are read from there when the engine starts.
 
-**Dependencies (Haskell packages):**
+**Dependencies (Haskell packages):** as declared in `shoresh-engine.cabal`; every version, transitive ones included, is pinned in `cabal.project.freeze`.
 - `base`
 - `containers` (Map, Set)
 - `text`
 - `aeson` (JSON: L1 verses and the port protocol)
-- `vector`
+- `bytestring` (reading L1 verse files; the port's line I/O)
+- `filepath`, `directory` (finding and walking L1 under `L1_MOUNT_POINT`)
+- `vector` (declared; no module imports it)
+- `hspec` (test suite only)
 
 ---
 
diff --git a/vav_pipeline/lib/vav_pipeline/doorpost.ex b/vav_pipeline/lib/vav_pipeline/doorpost.ex
index 74e78ae0..d3fc1ef2 100644
--- a/vav_pipeline/lib/vav_pipeline/doorpost.ex
+++ b/vav_pipeline/lib/vav_pipeline/doorpost.ex
@@ -175,7 +175,7 @@ defmodule VavPipeline.Doorpost do
   # changes; the update is a deliberate operator commit. A bare
   # hash-update commit (without a corresponding spec change in the
   # same commit) is itself a drift signal.
-  @expected_hash "f653ef0520c86bb378727fa877421796e18a424acc3fb396c62082b47c53cd50"
+  @expected_hash "5094e48ec4158f54646b00e8f2aa9ed57710b4ace33ccba155830a39e3149a38"
 
   @doc "Return the list of files that constitute the category-grade specification."
   @spec files() :: [String.t()]