diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6045d67..85a3f5c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.7.0 (2026-06-02)
+
+### Added
+- `cli/aegis.mjs` and the `aegis` package binary, including quick-start connection handling and executor override support for terminal demos. (aegis-oss#55)
+- `/chat/ws`, `ChatSession`, and `ChatSessionAuth` primitives for websocket-backed chat sessions, plus schema/configuration docs and tests. (aegis-oss#55)
+- Standalone chat shell UI support and a disambiguation firewall for safer routing and demo-path trust hardening.
+
+### Changed
+- Migrated the remaining in-repo LLM inference paths through `@stackbilt/llm-providers`: Claude executor, dynamic tools, Groq helpers, Workers AI helper fallbacks, composite execution, and the last raw Groq logprobs path. (aegis-oss#24)
+- Hardened digest delivery, grounding dispatch, and grounding-gap persistence so failed or missing evidence is recorded more consistently.
+
+### Fixed
+- Restored the release workflow's npm publish auth fallback while preserving trusted publishing support. (aegis-oss#51)
+
 ## 0.6.5 (2026-06-02)
 
 ### Fixed
diff --git a/docs/publishing.md b/docs/publishing.md
index be746ec..d6d799d 100644
--- a/docs/publishing.md
+++ b/docs/publishing.md
@@ -7,8 +7,8 @@
 Push a semver tag from `main`:
 
 ```bash
-git tag v0.6.6
-git push origin v0.6.6
+git tag v0.7.0
+git push origin v0.7.0
 ```
 
 The workflow installs dependencies, runs typecheck/tests, then publishes `web/package.json` to npm.
diff --git a/web/package-lock.json b/web/package-lock.json
index d7f18b2..7197e17 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@stackbilt/aegis-core",
-  "version": "0.6.4",
+  "version": "0.7.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@stackbilt/aegis-core",
-      "version": "0.6.4",
+      "version": "0.7.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@cloudflare/voice": "^0.1.3",
diff --git a/web/package.json b/web/package.json
index 3e24366..fe9867c 100755
--- a/web/package.json
+++ b/web/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stackbilt/aegis-core",
-  "version": "0.6.5",
+  "version": "0.7.0",
   "description": "Persistent AI agent framework for Cloudflare Workers. Multi-tier memory, autonomous goals, dreaming cycles, MCP native.",
   "license": "Apache-2.0",
   "publishConfig": {
diff --git a/web/src/version.ts b/web/src/version.ts
index 588cf7a..9c5e591 100755
--- a/web/src/version.ts
+++ b/web/src/version.ts
@@ -1,3 +1,3 @@
-// Semantic version — bump on each deploy
-// Used in /health endpoint and changelog tracking
-export const VERSION = '0.1.0';
+// Semantic version - bump on each deploy
+// Used in /health endpoint and changelog tracking
+export const VERSION = '0.7.0';