diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4d57a41..cb4e068 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,15 @@ getaggte Releases (Kanal `stable`, optional `beta`) — niemals Entwicklungs-Bui
 
 _Keine offenen Änderungen — der nächste Stand wird hier gesammelt und als `vX.Y.Z` getaggt._
 
+## [0.4.3] - 2026-06-14
+
+### Behoben
+- **Mobile Overflow durch lange URLs und IPv6-Bans.** Responsive-Audit (R7) über alle Views bei
+  375/768px: mit den aktuellen Daten lief nichts über, aber lange Werte konnten Zeilen über den
+  Viewport schieben. Behoben: die Panel-Domain (`break-all` am Link, `min-w-0` an der
+  Zugriffsadresse) im System-Bereich und gebannte IPv6-Adressen in der fail2ban-Liste
+  (`min-w-0 break-all`). Per injizierter 253-Zeichen-Domain und langer IPv6 bei 375px verifiziert.
+
 ## [0.4.2] - 2026-06-14
 
 ### Hinzugefügt
diff --git a/config/clusev.php b/config/clusev.php
index 93cb51e..d779bd9 100644
--- a/config/clusev.php
+++ b/config/clusev.php
@@ -3,7 +3,7 @@
 return [
     // First tagged release is v0.1.0 (semantic, not -dev). The live build hash
     // is resolved from .git at runtime (see App\Livewire\Versions\Index).
-    'version' => '0.4.2',
+    'version' => '0.4.3',
 
     // Default user channel. Only 'stable' and 'beta' are ever offered to users.
     'channel' => 'stable',
diff --git a/docs/session-handoff.md b/docs/session-handoff.md
index 710df16..14a2c7d 100644
--- a/docs/session-handoff.md
+++ b/docs/session-handoff.md
@@ -19,6 +19,9 @@ original foundational decisions doc (do not overwrite it).
   - `v0.4.2` — Server-Details UX + hardening polish (see §2b): uniform `danger-soft` buttons,
     installed-only firewall/fail2ban grid, auto-updates as a neutral preference, SSH-verified
     server creation + `pending` status, SSH key-only hint, and the fail2ban/UFW detection fix.
+  - `v0.4.3` — responsive audit (R7, all views @ 375/768): hardened mobile overflow from long
+    panel domains (`break-all`/`min-w-0`) and gebannte IPv6 in der fail2ban-Liste. Live pages were
+    already overflow-free; only data-dependent edge cases fixed.
 - **Dev stack** runs on this VM via `docker compose` (app container IP **172.18.0.6**, host
   `10.10.90.136:80`). Managed fleet host = **10.10.90.162** (Debian / apt / ufw; the only
   live-verified target — dnf/zypper/firewalld command strings are built but not live-tested).