diff --git a/cmd/wallet/main.go b/cmd/wallet/main.go
index 2fa33ca..56d2411 100644
--- a/cmd/wallet/main.go
+++ b/cmd/wallet/main.go
@@ -51,7 +51,7 @@ const shutdownGrace = 5 * time.Second
 // Version is the wallet binary's release tag. Kept in sync with the
 // app_version field in manifest.json — `manifest_test.go` cross-checks
 // they agree, so a release without bumping both fails CI.
-const Version = "0.4.1"
+const Version = "0.4.2"
 
 func main() {
 	ctx, cancel := signal.NotifyContext(context.Background(), syscall.SIGINT, syscall.SIGTERM)
diff --git a/manifest.json b/manifest.json
index ba2aa6e..73af3a8 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,6 +1,6 @@
 {
   "id": "io.pilot.wallet",
-  "app_version": "0.4.1",
+  "app_version": "0.4.2",
   "manifest_version": 2,
   "binary": {
     "runtime": "go",
@@ -55,11 +55,11 @@
     {"cap": "net.dial", "target": "settler:9100",
      "if": {"kind": "rate", "params": {"per": "min", "limit": 120}}},
     {"cap": "key.sign", "target": "x402-auth",
-     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 100}}},
+     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 10000000000}}},
     {"cap": "key.sign", "target": "evm-eip3009",
-     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 100}}},
+     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 10000000000}}},
     {"cap": "key.sign", "target": "settler-transfer",
-     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 100}}}
+     "if": {"kind": "cap", "params": {"asset": "USDC", "per": "day", "limit": 10000000000}}}
   ],
   "protection": "guarded",
   "store": {
diff --git a/manifest_test.go b/manifest_test.go
index 132176a..122bc3e 100644
--- a/manifest_test.go
+++ b/manifest_test.go
@@ -191,7 +191,8 @@ func TestShippedManifestSpendCapsParse(t *testing.T) {
 	if len(caps) != 3 {
 		t.Fatalf("parsed %d caps from shipped manifest, want 3 (x402-auth + evm-eip3009 + settler-transfer)", len(caps))
 	}
-	// All caps target USDC, window=24h, limit=100 (per manifest.json).
+	// All caps target USDC, window=24h, limit=10000000000 minor units, which is
+	// 10,000 USDC a day (per manifest.json): a ceiling; hosts set a lower limit.
 	for i, c := range caps {
 		if c.Asset != "USDC" {
 			t.Errorf("caps[%d].Asset = %q, want USDC", i, c.Asset)
@@ -199,8 +200,8 @@ func TestShippedManifestSpendCapsParse(t *testing.T) {
 		if c.Window != 24*time.Hour {
 			t.Errorf("caps[%d].Window = %s, want 24h", i, c.Window)
 		}
-		if c.Limit != 100 {
-			t.Errorf("caps[%d].Limit = %d, want 100", i, c.Limit)
+		if c.Limit != 10_000_000_000 {
+			t.Errorf("caps[%d].Limit = %d, want 10000000000 (10,000 USDC)", i, c.Limit)
 		}
 	}
 	// The grants target different sign-purposes; without the