diff --git a/backend/main.py b/backend/main.py
index 8eebbd2..ee3ba1c 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -327,7 +327,7 @@ MEDIA_DIR = os.getenv("MEDIA_DIR", "/data/media")
 os.makedirs(MEDIA_DIR, exist_ok=True)
 app.mount("/media", StaticFiles(directory=MEDIA_DIR), name="media")
 
-APP_VER = "741"  # muss mit APP_VER in app.js übereinstimmen
+APP_VER = "742"  # muss mit APP_VER in app.js übereinstimmen
 
 @app.get("/api/version")
 async def app_version():
diff --git a/backend/static/index.html b/backend/static/index.html
index 2f22a0a..45c11df 100644
--- a/backend/static/index.html
+++ b/backend/static/index.html
@@ -578,7 +578,7 @@
 <script src="/js/api.js?v=94"></script>
 <script src="/js/ui.js?v=94"></script>
 <script src="/js/app.js?v=94"></script>
-<script src="/js/worlds.js?v=741"></script>
+<script src="/js/worlds.js?v=742"></script>
 
 <!-- Feature-Seiten werden lazy geladen -->
 
diff --git a/backend/static/js/app.js b/backend/static/js/app.js
index 263fa80..c2a5089 100644
--- a/backend/static/js/app.js
+++ b/backend/static/js/app.js
@@ -3,7 +3,7 @@
    Router, State-Management, Navigation, Initialisierung.
    ============================================================ */
 
-const APP_VER     = '741'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
+const APP_VER     = '742'; // ← bei jedem Deploy mit Frontend-Änderungen erhöhen
 const APP_VERSION = '1.5.0'; // ← semantische Version, wird bei make release gesetzt
 const IS_STAGING  = location.hostname === 'staging.banyaro.app';
 
diff --git a/backend/static/js/worlds.js b/backend/static/js/worlds.js
index 2a56755..1b7fdda 100644
--- a/backend/static/js/worlds.js
+++ b/backend/static/js/worlds.js
@@ -594,7 +594,18 @@ window.Worlds = (() => {
 
   function _chipsForWorld(world) {
     const pages = _getConfig()[world] || _DEFAULT_CONFIG[world];
-    return pages.map(_chipMeta).filter(c => c && _chipAllowed(c));
+    const chips = pages.map(_chipMeta).filter(c => c && _chipAllowed(c));
+    // Sicherheitsnetz: Rolle-gebundene Chips immer einfügen wenn berechtigt
+    const u = _state?.user;
+    const alreadyIn = new Set(chips.map(c => c.page));
+    const defaults = _DEFAULT_CONFIG[world] || [];
+    for (const page of defaults) {
+      if (alreadyIn.has(page)) continue;
+      const meta = _chipMeta(page);
+      if (!meta?.role) continue; // nur role-gebundene Chips
+      if (_chipAllowed(meta)) { chips.push(meta); alreadyIn.add(page); }
+    }
+    return chips;
   }
 
   // ── KONFIGURATIONS-MODAL ─────────────────────────────────────
diff --git a/backend/static/sw.js b/backend/static/sw.js
index 9069442..55cd3b0 100644
--- a/backend/static/sw.js
+++ b/backend/static/sw.js
@@ -3,7 +3,7 @@
    Offline-Cache + Push Notifications + Tile-Cache
    ============================================================ */
 
-const CACHE_VERSION = 'by-v741';
+const CACHE_VERSION = 'by-v742';
 const CACHE_STATIC  = `${CACHE_VERSION}-static`;
 const CACHE_TILES   = 'ban-yaro-tiles-v1';  // bleibt über SW-Updates erhalten
 const CACHE_API     = 'ban-yaro-api-v1';    // API-Response-Cache