diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml
index ea3a20a..d0765e7 100644
--- a/.github/workflows/release-python.yml
+++ b/.github/workflows/release-python.yml
@@ -75,12 +75,15 @@ jobs:
           # client_payload; workflow_dispatch (dry-run) leaves it empty
           # and falls back to the latest release.
           TAG_ARG=()
-          if [ -n "$AASM_TAG" ]; then TAG_ARG=(--tag "$AASM_TAG"); fi
+          if [ -n "$AASM_TAG" ]; then TAG_ARG=("$AASM_TAG"); fi
           # Hard error on missing binary: the repository_dispatch event
           # guarantees the aasm-* assets exist on the upstream release
           # at this point (see AI-agent-assembly/agent-assembly#842).
-          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-linux-x86_64' --dir agent_assembly/bin/
-          mv agent_assembly/bin/aasm-linux-x86_64 agent_assembly/bin/aasm
+          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-x86_64-unknown-linux-gnu.tar.gz' --dir agent_assembly/bin/
+          # Tarball contains a single `aasm` binary at the root;
+          # extract in place, then drop the archive.
+          tar -xzf agent_assembly/bin/aasm-x86_64-unknown-linux-gnu.tar.gz -C agent_assembly/bin/
+          rm -f agent_assembly/bin/aasm-x86_64-unknown-linux-gnu.tar.gz
           chmod +x agent_assembly/bin/aasm
           echo "Bundled aasm binary into wheel"
       - name: Build wheel
@@ -140,12 +143,15 @@ jobs:
           mkdir -p agent_assembly/bin
           # See linux-x86_64 above for tag-pinning rationale.
           TAG_ARG=()
-          if [ -n "$AASM_TAG" ]; then TAG_ARG=(--tag "$AASM_TAG"); fi
+          if [ -n "$AASM_TAG" ]; then TAG_ARG=("$AASM_TAG"); fi
           # Hard error on missing binary: the repository_dispatch event
           # guarantees the aasm-* assets exist on the upstream release
           # at this point (see AI-agent-assembly/agent-assembly#842).
-          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-linux-aarch64' --dir agent_assembly/bin/
-          mv agent_assembly/bin/aasm-linux-aarch64 agent_assembly/bin/aasm
+          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-aarch64-unknown-linux-gnu.tar.gz' --dir agent_assembly/bin/
+          # Tarball contains a single `aasm` binary at the root;
+          # extract in place, then drop the archive.
+          tar -xzf agent_assembly/bin/aasm-aarch64-unknown-linux-gnu.tar.gz -C agent_assembly/bin/
+          rm -f agent_assembly/bin/aasm-aarch64-unknown-linux-gnu.tar.gz
           chmod +x agent_assembly/bin/aasm
           echo "Bundled aasm binary into wheel"
       - name: Build wheel
@@ -197,12 +203,15 @@ jobs:
           mkdir -p agent_assembly/bin
           # See linux-x86_64 above for tag-pinning rationale.
           TAG_ARG=()
-          if [ -n "$AASM_TAG" ]; then TAG_ARG=(--tag "$AASM_TAG"); fi
+          if [ -n "$AASM_TAG" ]; then TAG_ARG=("$AASM_TAG"); fi
           # Hard error on missing binary: the repository_dispatch event
           # guarantees the aasm-* assets exist on the upstream release
           # at this point (see AI-agent-assembly/agent-assembly#842).
-          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-macos-arm64' --dir agent_assembly/bin/
-          mv agent_assembly/bin/aasm-macos-arm64 agent_assembly/bin/aasm
+          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-aarch64-apple-darwin.tar.gz' --dir agent_assembly/bin/
+          # Tarball contains a single `aasm` binary at the root;
+          # extract in place, then drop the archive.
+          tar -xzf agent_assembly/bin/aasm-aarch64-apple-darwin.tar.gz -C agent_assembly/bin/
+          rm -f agent_assembly/bin/aasm-aarch64-apple-darwin.tar.gz
           chmod +x agent_assembly/bin/aasm
           echo "Bundled aasm binary into wheel"
       - name: Install protoc (macOS)
@@ -237,12 +246,15 @@ jobs:
           mkdir -p agent_assembly/bin
           # See linux-x86_64 above for tag-pinning rationale.
           TAG_ARG=()
-          if [ -n "$AASM_TAG" ]; then TAG_ARG=(--tag "$AASM_TAG"); fi
+          if [ -n "$AASM_TAG" ]; then TAG_ARG=("$AASM_TAG"); fi
           # Hard error on missing binary: the repository_dispatch event
           # guarantees the aasm-* assets exist on the upstream release
           # at this point (see AI-agent-assembly/agent-assembly#842).
-          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-macos-x86_64' --dir agent_assembly/bin/
-          mv agent_assembly/bin/aasm-macos-x86_64 agent_assembly/bin/aasm
+          gh release download "${TAG_ARG[@]}" --repo "$AASM_REPO" --pattern 'aasm-x86_64-apple-darwin.tar.gz' --dir agent_assembly/bin/
+          # Tarball contains a single `aasm` binary at the root;
+          # extract in place, then drop the archive.
+          tar -xzf agent_assembly/bin/aasm-x86_64-apple-darwin.tar.gz -C agent_assembly/bin/
+          rm -f agent_assembly/bin/aasm-x86_64-apple-darwin.tar.gz
           chmod +x agent_assembly/bin/aasm
           echo "Bundled aasm binary into wheel"
       - name: Install protoc (macOS)