diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ac7b754..5c4a7f7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,7 +1,7 @@
 name: CI + Deploy to HuggingFace Space
 
 # GitHub = single source of truth. HF Space = deployed runtime mirror.
-# On every push to main: run privacy audit + 260-test suite, then (only
+# On every push to main: run privacy audit + 263-test suite, then (only
 # if both green) force-push the tree to the HF Space.
 #
 # Constraints enforced here:
@@ -52,7 +52,7 @@ jobs:
           echo "✓ No private artefacts tracked. Safe to build."
 
   test:
-    name: Unit tests (260 hermetic tests)
+    name: Unit tests (263 hermetic tests)
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
diff --git a/Dockerfile b/Dockerfile
index 1a1d02e..34b62e4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,7 +17,7 @@
 # - No mutation of /app at container start.
 # - Provider selection is surfaced in the UI; no hidden switching.
 
-FROM python:3.14-slim-bookworm
+FROM python:3.12-slim-bookworm
 
 # HF Spaces require uid 1000 to own /home/user/app. Create the user first.
 RUN useradd -m -u 1000 user