diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
index f3549e06..501da11c 100644
--- a/.claude-plugin/marketplace.json
+++ b/.claude-plugin/marketplace.json
@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "Development, data science, and writing workflows for Claude Code",
-    "version": "5.72.0"
+    "version": "5.72.1"
   },
   "plugins": [
     {
       "name": "workflows",
       "source": "./",
       "description": "Unified development, data science, and writing workflows with TDD enforcement, output-first verification, GSD-style deviation rules, test gap validation, and session handoff",
-      "version": "5.72.0",
+      "version": "5.72.1",
       "category": "development",
       "tags": [
         "development",
diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 8a0c4f27..b900961f 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "workflows",
-  "version": "5.72.0",
+  "version": "5.72.1",
   "description": "Development, data science, writing, and workshop presentation workflows with TDD enforcement, output-first verification, agent team parallelization, and GSD-style deviation rules, test gap validation, and session handoff.",
   "author": {
     "name": "edwinhu"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index f6f99cb9..23a2f1d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,11 @@
 All notable changes to this project are documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/).
 
+## [5.72.1] - 2026-07-21
+
+### Changed
+- **`paperpile`**: corrected the wedged-tab explanation in `scripts/refresh-auth-from-dia.sh`. The prior comment blamed the CDP hang on "a playing YouTube tab", which was an over-specific inference from one observation. Re-probing three hours later, the YouTube tab answered in milliseconds and an unrelated tab hung instead — it tracks renderer busyness, not the site. No code change; the browser-target fix was already right, and this makes it more clearly right (if the culprit were a known site you could special-case it; since any tab can wedge and the identity drifts, avoiding page targets entirely is the only sound answer).
+
 ## [5.72.0] - 2026-07-21
 
 ### Added
diff --git a/skills/paperpile/scripts/refresh-auth-from-dia.sh b/skills/paperpile/scripts/refresh-auth-from-dia.sh
index ce60d029..e6851380 100755
--- a/skills/paperpile/scripts/refresh-auth-from-dia.sh
+++ b/skills/paperpile/scripts/refresh-auth-from-dia.sh
@@ -10,10 +10,15 @@
 # one command to run — there is never a reason to drive the Paperpile web UI.
 #
 # Cookies are read from the BROWSER-level CDP target via Storage.getCookies,
-# not from a page target. Page targets route through a renderer, and a wedged
-# tab (a playing YouTube tab reproduces this) never answers Network.getCookies —
-# which used to hang this script forever, since it attached to whichever page
-# happened to be listed first. The browser target has no renderer to wedge.
+# not from a page target. Page targets route through a renderer, and a busy
+# renderer never answers Network.getCookies — which used to hang this script
+# forever, since it attached to whichever page happened to be listed first.
+#
+# Any tab can be the wedged one, and it moves: probing six page targets, one
+# hung indefinitely while five answered in milliseconds — and three hours later
+# the hung tab answered fine while a different one had started hanging. It
+# tracks renderer busyness, not the site. The browser target has no renderer,
+# so it cannot wedge and needs no particular tab open.
 set -euo pipefail
 
 PORT="${1:-9222}"