diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a5936fb..26fca96 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,16 +25,19 @@ jobs:
       - name: Build
         env:
           CGO_ENABLED: "0"
-          GOOS: linux
         run: |
-          for arch in amd64 arm64; do
-            GOARCH="$arch" go build -trimpath -o "dist/tamis-linux-$arch" ./cmd/tamis
+          for os in linux darwin windows; do
+            ext=""
+            [ "$os" = windows ] && ext=".exe"
+            for arch in amd64 arm64; do
+              GOOS="$os" GOARCH="$arch" go build -trimpath -o "dist/tamis-$os-$arch$ext" ./cmd/tamis
+            done
           done
       # The action only runs a released binary attested by this workflow for the commit it was given.
       - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4.2.2
         with:
-          subject-path: dist/tamis-linux-*
+          subject-path: dist/tamis-*
       - name: Publish the release
         env:
           GH_TOKEN: ${{ github.token }}
-        run: gh release create "$GITHUB_REF_NAME" dist/tamis-linux-* --repo "$GITHUB_REPOSITORY" --verify-tag --generate-notes
+        run: gh release create "$GITHUB_REF_NAME" dist/tamis-* --repo "$GITHUB_REPOSITORY" --verify-tag --generate-notes
diff --git a/docs/development.md b/docs/development.md
index 964d302..4a6db44 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -50,7 +50,7 @@ To bump an agent CLI, update its tag and the sha256 of each architecture's asset
 
 ## Releases
 
-A `vYYYY.MM.DD.N` tag such as `v2026.10.25.1` runs the `Release` workflow. It builds tamis for Linux on amd64 and arm64, attests both binaries and publishes them in a GitHub release.
+A `vYYYY.MM.DD.N` tag such as `v2026.10.25.1` runs the `Release` workflow. It builds tamis for Linux, macOS and Windows on amd64 and arm64, attests the six binaries and publishes them in a GitHub release. The action runs the Linux ones, the others serve local runs.
 
 When the action's pinned commit carries such a tag, the action downloads the binary for the runner and checks its attestation against that commit before running it. For any other commit, the action builds tamis from source.