diff --git a/CHANGELOG.md b/CHANGELOG.md
index f1cf72c..b069ca2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,31 @@ All notable changes to the `agentveil` SDK.
 
 No unreleased changes.
 
+## [0.7.29-mcp-proxy] - 2026-07-06
+
+Public trust and approval environment hardening release for
+`agentveil-mcp-proxy`.
+
+### MCP Proxy added
+- Added `agentveil-mcp-proxy demo`, a local guided flow that shows the generic
+  routed MCP redirect shape, browser approval, retry, and bounded local proof
+  without exposing policy catalogs or private playbook depth.
+
+### MCP Proxy changed
+- Updated the public README PyPI badge and package version signal to `0.7.29`.
+- Improved root CLI help around the first-run path and kept `init` next-step
+  guidance privacy-bounded when custom home/config paths are used.
+- Qualified evidence verification output so empty bundles and chain-only
+  bundles no longer render as bare `VERIFY: passed`.
+- Started managed Approval Center child processes with a bounded environment
+  instead of inheriting the full parent shell environment across shared,
+  launcher, and legacy Claude lifecycle paths.
+
+### MCP Proxy verification
+- Local public SDK PR gate passed on PR #104 head with `1566 passed, 1 skipped`.
+- GitHub Actions passed for PR #104 across macOS, Windows, and Ubuntu
+  compatibility checks before merge.
+
 ## [0.7.28-mcp-proxy] - 2026-07-02
 
 Launcher lifecycle and status hardening release for `agentveil-mcp-proxy`.
diff --git a/README.md b/README.md
index f69156e..2af7683 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@
 
 # AgentVeil
 
-[![PyPI](https://img.shields.io/badge/PyPI-0.7.28-blue)](https://pypi.org/project/agentveil-mcp-proxy/0.7.28/)
+[![PyPI](https://img.shields.io/badge/PyPI-0.7.29-blue)](https://pypi.org/project/agentveil-mcp-proxy/0.7.29/)
 [![Python](https://img.shields.io/pypi/pyversions/agentveil-mcp-proxy)](https://pypi.org/project/agentveil-mcp-proxy/)
 [![Tests](https://github.com/agentveil-protocol/agentveil-sdk/actions/workflows/tests.yml/badge.svg)](https://github.com/agentveil-protocol/agentveil-sdk/actions)
 [![SDK License: MIT](https://img.shields.io/badge/SDK-MIT-informational)](LICENSING.md)
diff --git a/packages/agentveil-mcp-proxy/pyproject.toml b/packages/agentveil-mcp-proxy/pyproject.toml
index d944a2c..bc0a9be 100644
--- a/packages/agentveil-mcp-proxy/pyproject.toml
+++ b/packages/agentveil-mcp-proxy/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "agentveil-mcp-proxy"
-version = "0.7.28"
+version = "0.7.29"
 description = "Source-available MCP route for approval and local evidence on routed MCP tool calls"
 readme = {file = "README.md", content-type = "text/markdown"}
 requires-python = ">=3.10"