diff --git a/flake.lock b/flake.lock
index 7dd986a..000f130 100644
--- a/flake.lock
+++ b/flake.lock
@@ -98,16 +98,17 @@
         ]
       },
       "locked": {
-        "lastModified": 1786572376,
-        "narHash": "sha256-BOWenBBnlSikjS9ZVgJg6XJTa6ylov9Zxe0RarDN5iA=",
+        "lastModified": 1786714960,
+        "narHash": "sha256-PZ6iBGehVe0D9/SSYDyyCT0ktL7iJ6D1Itci8anpmf0=",
         "owner": "logos-co",
         "repo": "logos-protocol",
-        "rev": "e6d5b575c25d9d26827aa4c6a9a203b175a7e0d8",
+        "rev": "c8bab12834dbf92155b483546875e6078d17c74e",
         "type": "github"
       },
       "original": {
         "owner": "logos-co",
         "repo": "logos-protocol",
+        "rev": "c8bab12834dbf92155b483546875e6078d17c74e",
         "type": "github"
       }
     },
diff --git a/flake.nix b/flake.nix
index a41a808..f191493 100644
--- a/flake.nix
+++ b/flake.nix
@@ -8,8 +8,16 @@
     logos-module.url = "github:logos-co/logos-module";
     nixpkgs.follows = "logos-nix/nixpkgs";
     # The transport / consumer / token layer logos-qt-host is the Qt face of.
+    #
+    # Rev-pinned, not master-tracking: LogosAPI is now constructible on its own
+    # token store, which needs TokenManager::forIdentity / isolateIdentity from
+    # logos-protocol's feat/per-client-token-store branch. Those are NOT on
+    # protocol master (still LOGOS_PROTOCOL_VERSION_MINOR 2), and the cdylib
+    # glue's grant forwarding is guarded on MINOR >= 3, so a master-tracking pin
+    # both fails to compile logos_api.cpp and silently drops the grant. Re-point
+    # at master once that branch merges.
     logos-protocol = {
-      url = "github:logos-co/logos-protocol";
+      url = "github:logos-co/logos-protocol/c8bab12834dbf92155b483546875e6078d17c74e";
       inputs.logos-nix.follows = "logos-nix";
     };
     # The canonical LIDL frontend logos-qt-host-generator parses contracts with.