diff --git a/CHANGELOG.md b/CHANGELOG.md
index 69b9518..0b85d36 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,7 +4,7 @@ All notable changes to this project are documented here. Format loosely
follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); versions
follow [SemVer](https://semver.org/).
-## [Unreleased]
+## [1.8.1]
### Added
@@ -42,6 +42,12 @@ follow [SemVer](https://semver.org/).
### Changed
+- **Homebrew install docs** (README and the landing page's `brew` tab)
+ now walk through the one-time Gatekeeper approval macOS still requires
+ on first launch (the cask clears the quarantine attribute, but the
+ binary is unsigned) — screenshots and steps courtesy of
+ [@Sk8teb0arder](https://github.com/Sk8teb0arder) (see
+ [#9](https://github.com/padovanl/pkgtui/issues/9)).
- The `P` screen manages **third-party sources generally**, not just apt
PPAs: flatpak remotes now use it too, each backend labelling them in its
own words. A rebound `P` key keeps working — the setting is still stored
diff --git a/README.md b/README.md
index e098b2e..a95ed32 100644
--- a/README.md
+++ b/README.md
@@ -211,7 +211,30 @@ URL for repos named that way.
The cask covers Apple Silicon, Intel Macs and Linuxbrew, and clears the
Gatekeeper quarantine attribute itself, which matters because these
-binaries aren't notarized.
+binaries aren't notarized. macOS still requires one manual approval on
+the very first launch, since the binary is unsigned — not required again
+after that:
+
+1. Right after `brew install --cask pkgtui` finishes, macOS reports
+ *"pkgtui" Not Opened* since the binary isn't notarized — click
+ **Done** (not Move to Bin), it's already on your `PATH`.
+
+
+
+2. Open **System Settings → Privacy & Security**, scroll down to the
+ note that *"pkgtui" was blocked to protect your Mac*, and click
+ **Allow Anyway**.
+
+
+
+3. Open a terminal and run `pkgtui` again — an *Open "pkgtui"?* prompt
+ appears, click **Open Anyway**, then enter your password when asked.
+ `pkgtui` starts normally from then on.
+
+
+
+(Thanks to [@Sk8teb0arder](https://github.com/Sk8teb0arder) for walking
+through this and sharing the screenshots.)
### macOS without Homebrew
diff --git a/assets/macos-first-run/01-not-opened.png b/assets/macos-first-run/01-not-opened.png
new file mode 100644
index 0000000..d7a0acc
Binary files /dev/null and b/assets/macos-first-run/01-not-opened.png differ
diff --git a/assets/macos-first-run/02-allow-anyway.png b/assets/macos-first-run/02-allow-anyway.png
new file mode 100644
index 0000000..6d09305
Binary files /dev/null and b/assets/macos-first-run/02-allow-anyway.png differ
diff --git a/assets/macos-first-run/03-open-anyway.png b/assets/macos-first-run/03-open-anyway.png
new file mode 100644
index 0000000..1af4169
Binary files /dev/null and b/assets/macos-first-run/03-open-anyway.png differ
diff --git a/docs/index.html b/docs/index.html
index 62603ae..05fda4c 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -341,6 +341,12 @@
.install-panel.active { display: block; }
.comment { color: var(--rust-dim); }
.install-note { color: var(--rust); font-size: 0.88rem; font-family: var(--serif); }
+ .first-run { margin-top: 16px; border: 1px solid var(--hairline); border-radius: 6px; padding: 14px 18px; }
+ .first-run summary { cursor: pointer; color: var(--rust); font-family: var(--serif); font-size: 0.92rem; font-weight: 700; }
+ .first-run ol { margin: 12px 0 0; padding-left: 20px; color: var(--rust); font-family: var(--serif); font-size: 0.92rem; line-height: 1.6; }
+ .first-run li { margin-bottom: 14px; }
+ .first-run li:last-child { margin-bottom: 0; }
+ .first-run img { display: block; width: 100%; max-width: 420px; height: auto; border: 1px solid var(--hairline); border-radius: 4px; margin-top: 8px; }
/* ---- keybinding reference ---- */
.key-chips { display: flex; flex-wrap: wrap; gap: 6px; margin-bottom: 34px; }
@@ -603,6 +609,18 @@
# macOS (Apple Silicon or Intel) and Linuxbrew
brew tap padovanl/pkgtui https://github.com/padovanl/pkgtui
brew install --cask pkgtui
+ brew install --cask pkgtui finishes, macOS reports "pkgtui" Not Opened since the binary isn't notarized — click Done (not Move to Bin), it's already been placed on your PATH.
+ 

pkgtui again — an Open "pkgtui"? prompt appears, click Open Anyway, then enter your password when asked. pkgtui starts normally from then on.
+ 
Only needed once, on the very first launch — thanks to @Sk8teb0arder for walking through this and sharing the screenshots.
+# without Homebrew: darwin_arm64 on Apple Silicon, darwin_amd64 on Intel