diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..c3d8396
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,9 @@
+# Changelog
+
+## 1.0.1 - 2026-10-26
+
+- Publish the reviewed checker and documentation after the security audit, including bounded acquisition, redirect scope, protected output paths, checkpoint recovery, and report identity improvements.
+- Set the tool version to 1.0.1 so this release is distinct from the existing immutable v1.0.0 release.
+- Distribute the current AGPL-3.0 / commercial licensing and brand terms. The existing v1.0.0 release retains its original MIT license.
+
+This release performs no exploit verification. Advertised PHP versions remain unverified evidence, and exploitability remains `not_tested`.
diff --git a/wordpress_check.py b/wordpress_check.py
index b20f3de..b7b9a3e 100644
--- a/wordpress_check.py
+++ b/wordpress_check.py
@@ -33,7 +33,7 @@
 
 
 TOOL_NAME = "php2shell-check"
-TOOL_VERSION = "1.0.0"
+TOOL_VERSION = "1.0.1"
 BOT = "WordPressPublicChecker"
 REDIRECTS = {301, 302, 303, 307, 308}
 MAX_BODY = 2 * 1024 * 1024