diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b53663f..cedcc3e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,6 +13,9 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
+    permissions:
+      # electron-builder uploads the installers to a draft GitHub Release.
+      contents: write
     steps:
       - uses: actions/checkout@v4
 
@@ -29,7 +32,9 @@ jobs:
           ELECTRON_SKIP_BINARY_DOWNLOAD: '1'
 
       - name: Build and package
-        run: npm run build && npx electron-builder --publish never
+        # Publishes the installers to a DRAFT GitHub Release for the tag —
+        # reviewed and published manually. Artifacts below stay as a backup.
+        run: npm run build && npx electron-builder --publish always
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e1871e9..8367179 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-07-20
+
 ### Changed
 
 - The app's primary typeface is now **JetBrains Mono** (bundled, OFL) — a
@@ -147,5 +149,6 @@ First complete release: a working, end-to-end personality forge.
 - MIT license, contributor guide (`CLAUDE.md`), and architecture spec
   (`ARCHITECTURE.md`).
 
-[Unreleased]: https://github.com/Exploitacious/hatchling/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/Exploitacious/hatchling/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/Exploitacious/hatchling/compare/v0.1.0...v1.0.0
 [0.1.0]: https://github.com/Exploitacious/hatchling/releases/tag/v0.1.0
diff --git a/README.md b/README.md
index ce1f6f4..0cd5c24 100644
--- a/README.md
+++ b/README.md
@@ -73,6 +73,16 @@ doesn't support fail with the provider's own error message, not silently.
 - Sessions, templates, and generated files live in a local SQLite database.
 - Files stay in memory during a hatch and only touch disk when you export.
 
+## Download
+
+Grab the installer for your platform from the
+[**Releases page**](https://github.com/Exploitacious/hatchling/releases) —
+Windows (installer + portable), macOS (dmg), and Linux (AppImage + deb).
+
+> The binaries are unsigned, so the first launch shows the usual warnings:
+> Windows SmartScreen → "More info" → "Run anyway"; macOS → right-click the app
+> → "Open".
+
 ## Requirements
 
 - **Node.js 20+** and **npm** (for building from source).
diff --git a/electron-builder.yml b/electron-builder.yml
index b282a7b..b4fa3ee 100644
--- a/electron-builder.yml
+++ b/electron-builder.yml
@@ -6,6 +6,12 @@ directories:
   buildResources: build
   output: release
 
+# CI publishes installers to a draft GitHub Release on version tags; the draft
+# is reviewed and published manually.
+publish:
+  provider: github
+  releaseType: draft
+
 # Only the bundled output + manifest ship in the app. Source, tests, and
 # dev config are excluded automatically by electron-builder defaults.
 files:
diff --git a/package-lock.json b/package-lock.json
index 5ff7758..8d25287 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "hatchling",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "hatchling",
-      "version": "0.1.0",
+      "version": "1.0.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index bb6223f..eebcc16 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "hatchling",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "A local-first desktop app for interactively creating AI agent personality files through a conversational hatching process.",
   "main": "./out/main/index.js",
   "author": "Exploitacious",