diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 8d73c7b..11fea0f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1 +1 @@
-{".": "0.0.0"}
+{".":"1.0.0"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..b47e246
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,26 @@
+# Changelog
+
+## 1.0.0 (2026-07-13)
+
+
+### Features
+
+* harden deterministic CI repair demo ([05cdc36](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/05cdc3698dc003eb8bf45d46c7e69461d9414ea7))
+
+
+### Bug Fixes
+
+* audit sweep for workflow security ([#5](https://github.com/Coding-Autopilot-System/autopilot-demo/issues/5)) ([60baf65](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/60baf6569718d03c87523539d83a6409b929a11b))
+* **ci:** repin release-please reusable workflow to reachable SHA ([#13](https://github.com/Coding-Autopilot-System/autopilot-demo/issues/13)) ([507be0e](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/507be0e85e0c4264d2c127588727ec50df086d69))
+* **ci:** resolve F-02 dependency file hygiene ([eca5a27](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/eca5a272eed645b3ca8861b4617b19a10b7a41b0))
+* **ci:** resolve F-02 fail-closed YAML validation ([f5df6b9](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/f5df6b9ffdec83d081d863ab2fce120845fbd0a5))
+* **ci:** wire release-please PAT into reusable workflow caller ([#16](https://github.com/Coding-Autopilot-System/autopilot-demo/issues/16)) ([d08e84e](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/d08e84e0434b86127ef809719ea1975408698ed7))
+* **demo:** resolve F-01 reproducible failure path ([0d00a9b](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/0d00a9bcb62d8d5f35adf9a35c6fc2f63c9e3308))
+* **docs:** resolve F-08 repeatable demo runbook ([7804583](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/7804583d186e6e0fa9647d14efad9860fd24b2ed))
+* **docs:** resolve F-08 repeatable demo runbook ([5d92fde](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/5d92fde8e6d801a2b6cc6158ea008611a8c37354))
+* **intake:** resolve F-06 serialize issue updates ([5b21467](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/5b2146770dcdd052e738c8e1e36fed2a31ee38c6))
+* **intake:** resolve F-07 enrich audit evidence ([8676864](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/8676864f5b085758d6e5d0bdd168671ed899c988))
+* **security:** resolve F-03 pin Actions by SHA ([8a65087](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/8a6508700979c06623b0264cd8d33f57a634f665))
+* **security:** resolve F-04 bound workflow permissions ([c18cd4b](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/c18cd4b7d6b0b4beb26631a8654425ca9a887665))
+* **test:** resolve F-05 add workflow contracts ([6050781](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/605078134150bddb0e3f2a0374c3e9e42efded2a))
+* **test:** resolve F-05 ignore generated bytecode ([868a533](https://github.com/Coding-Autopilot-System/autopilot-demo/commit/868a53306bcd5faf439157851dc023fc89b6acb0))