diff --git a/README.md b/README.md
index f6e0d42..b0f7081 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ Field access for QQQ applications: FULL, REVEALABLE, MASKED and HIDDEN tiers by
 
 ## Requirements
 
-Java 21 and QQQ 4.1.0-SNAPSHOT with the fieldaccess hooks. The Maven wrapper pins Maven 3.9.11.
+Java 21 and QQQ 4.1.0-RC.5 (RC.6 for the fieldaccess hooks). The Maven wrapper pins Maven 3.9.11.
 
 ## Install
 
diff --git a/pom.xml b/pom.xml
index c85a807..bc80025 100644
--- a/pom.xml
+++ b/pom.xml
@@ -201,8 +201,8 @@
             <activeByDefault>true</activeByDefault>
          </activation>
          <properties>
-            <!-- TODO(secured-data): pin to the QQQ RC that ships the fieldaccess hooks (qqq feature/secured-data-core) -->
-            <qqq.snapshot.version>4.1.0-SNAPSHOT</qqq.snapshot.version>
+            <!-- Pinned to the latest released QQQ RC (secured-data#4). Raise to RC.6, which ships the fieldaccess hooks; local builds against unreleased core pass -Dqqq.snapshot.version=... -->
+            <qqq.snapshot.version>4.1.0-RC.5</qqq.snapshot.version>
          </properties>
          <dependencyManagement>
             <dependencies>