diff --git a/Makefile b/Makefile
index 6057336..89ec16c 100644
--- a/Makefile
+++ b/Makefile
@@ -32,6 +32,7 @@ all: app website
 
 app:
 	cp crypto/*.js $(APP_DIR)/cmd/vault1984/web/
+	sed -i 's/__BUILD_TIME__/$(shell date -u +%Y%m%d-%H%M%S)/' $(APP_DIR)/cmd/vault1984/web/index.html
 	cd $(APP_DIR) && go build $(GOFLAGS) -ldflags '$(LDFLAGS)' -o vault1984 $(APP_ENTRY)
 	@echo "built $(APP_BIN) (FIPS)"
 
diff --git a/cli/build/src/main.o b/cli/build/src/main.o
index efec44f..e2ec6db 100644
Binary files a/cli/build/src/main.o and b/cli/build/src/main.o differ
diff --git a/cli/src/main.c b/cli/src/main.c
index 8dc46e5..737e361 100644
--- a/cli/src/main.c
+++ b/cli/src/main.c
@@ -294,11 +294,6 @@ int main(int argc, char **argv) {
     snprintf(cfg.agent_name, sizeof(cfg.agent_name), "%s", agent_name);
     memcpy(cfg.l2_key, l2_key, 16);
 
-    /* Debug: show L2 key for verification — REMOVE BEFORE RELEASE */
-    fprintf(stderr, "L2 key: [");
-    for (int i = 0; i < 16; i++) fprintf(stderr, "%s%d", i?",":"", cfg.l2_key[i]);
-    fprintf(stderr, "]\n");
-
     /* L1 = first 8 bytes of L2 key, used as Bearer auth */
     char bearer[32];
     get_bearer(&cfg, bearer, sizeof(bearer));
diff --git a/cli/vault1984-cli b/cli/vault1984-cli
index 8dbad40..1176f9a 100755
Binary files a/cli/vault1984-cli and b/cli/vault1984-cli differ