diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index bcc858a9..be8d4b4c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,27 +1,27 @@
 {
-  "auth/skg-auth": "0.4.0",
-  "crypto/skg-crypto": "0.4.0",
-  "effects/skg-effects-core": "0.4.0",
-  "effects/skg-effects-local": "0.4.0",
-  "env/skg-env-local": "0.4.0",
-  "hooks/skg-hook-security": "0.4.0",
+  "auth/skg-auth": "1.0.0",
+  "crypto/skg-crypto": "1.0.0",
+  "effects/skg-effects-core": "1.0.0",
+  "effects/skg-effects-local": "1.0.0",
+  "env/skg-env-local": "1.0.0",
+  "hooks/skg-hook-security": "1.0.0",
   "hooks/skg-hooks": "0.4.0",
-  "layer0": "0.4.0",
-  "skelegent": "0.4.0",
+  "layer0": "1.0.0",
+  "skelegent": "1.0.0",
   "op/skg-op-react": "0.4.0",
-  "op/skg-op-single-shot": "0.4.0",
-  "orch/skg-orch-kit": "0.4.0",
-  "orch/skg-orch-local": "0.4.0",
-  "provider/skg-provider-anthropic": "0.4.0",
-  "provider/skg-provider-ollama": "0.4.0",
-  "provider/skg-provider-openai": "0.4.0",
-  "secret/skg-secret": "0.4.0",
-  "secret/skg-secret-vault": "0.4.0",
-  "state/skg-state-fs": "0.4.0",
-  "state/skg-state-memory": "0.4.0",
-  "turn/skg-context": "0.4.0",
-  "turn/skg-mcp": "0.4.0",
-  "turn/skg-tool": "0.4.0",
-  "turn/skg-turn": "0.4.0",
-  "turn/skg-turn-kit": "0.4.0"
+  "op/skg-op-single-shot": "1.0.0",
+  "orch/skg-orch-kit": "1.0.0",
+  "orch/skg-orch-local": "1.0.0",
+  "provider/skg-provider-anthropic": "1.0.0",
+  "provider/skg-provider-ollama": "1.0.0",
+  "provider/skg-provider-openai": "1.0.0",
+  "secret/skg-secret": "1.0.0",
+  "secret/skg-secret-vault": "1.0.0",
+  "state/skg-state-fs": "1.0.0",
+  "state/skg-state-memory": "1.0.0",
+  "turn/skg-context": "1.0.0",
+  "turn/skg-mcp": "1.0.0",
+  "turn/skg-tool": "1.0.0",
+  "turn/skg-turn": "1.0.0",
+  "turn/skg-turn-kit": "1.0.0"
 }
diff --git a/auth/skg-auth/CHANGELOG.md b/auth/skg-auth/CHANGELOG.md
new file mode 100644
index 00000000..d9cc67c8
--- /dev/null
+++ b/auth/skg-auth/CHANGELOG.md
@@ -0,0 +1,12 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-auth-v0.4.0...skg-auth-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
diff --git a/auth/skg-auth/Cargo.toml b/auth/skg-auth/Cargo.toml
index 01aa0a5a..3f6019e2 100644
--- a/auth/skg-auth/Cargo.toml
+++ b/auth/skg-auth/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-auth"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/crypto/skg-crypto/CHANGELOG.md b/crypto/skg-crypto/CHANGELOG.md
new file mode 100644
index 00000000..04211fe1
--- /dev/null
+++ b/crypto/skg-crypto/CHANGELOG.md
@@ -0,0 +1,12 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-crypto-v0.4.0...skg-crypto-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
diff --git a/effects/skg-effects-core/CHANGELOG.md b/effects/skg-effects-core/CHANGELOG.md
new file mode 100644
index 00000000..b5a73b26
--- /dev/null
+++ b/effects/skg-effects-core/CHANGELOG.md
@@ -0,0 +1,19 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-effects-core-v0.4.0...skg-effects-core-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+
+
+### Bug Fixes
+
+* **context-engine:** reconcile durable orch merge ([d1f9a4c](https://github.com/SecBear/skelegent/commit/d1f9a4cfb8c89bda7fe47b6d67fd3301af03b91a))
diff --git a/effects/skg-effects-core/Cargo.toml b/effects/skg-effects-core/Cargo.toml
index 47dfc64c..9614ecf9 100644
--- a/effects/skg-effects-core/Cargo.toml
+++ b/effects/skg-effects-core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-effects-core"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/effects/skg-effects-local/CHANGELOG.md b/effects/skg-effects-local/CHANGELOG.md
new file mode 100644
index 00000000..4df3e81e
--- /dev/null
+++ b/effects/skg-effects-local/CHANGELOG.md
@@ -0,0 +1,31 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-effects-local-v0.4.0...skg-effects-local-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* Dispatcher::dispatch takes &DispatchContext instead of &OperatorId ([5858d49](https://github.com/SecBear/skelegent/commit/5858d4925817b9f7b81624a76fd5334f872daca6))
+* implement graph ops on InMemoryStore, add graph and effect pipeline tests ([5c057c0](https://github.com/SecBear/skelegent/commit/5c057c085fdb31e0533956f180b5d8ee1148d560))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+
+
+### Bug Fixes
+
+* **context-engine:** reconcile durable orch merge ([d1f9a4c](https://github.com/SecBear/skelegent/commit/d1f9a4cfb8c89bda7fe47b6d67fd3301af03b91a))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* polish primitives — wire disconnected seams, fix silent failures ([a03637d](https://github.com/SecBear/skelegent/commit/a03637d1182bb4c7b220392018fce1f119a13d3b))
+* preserve structured JSON in handoff metadata instead of Null ([94feb3c](https://github.com/SecBear/skelegent/commit/94feb3cb144f965084ea6f15b07e9d6b39dfdca5))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+* resolve all P1 + P2 audit findings ([b255033](https://github.com/SecBear/skelegent/commit/b255033a1bba35ee9bd4541e45b08f3fdf44a4b9))
diff --git a/effects/skg-effects-local/Cargo.toml b/effects/skg-effects-local/Cargo.toml
index f924f0fa..78b10b0c 100644
--- a/effects/skg-effects-local/Cargo.toml
+++ b/effects/skg-effects-local/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-effects-local"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/env/skg-env-local/CHANGELOG.md b/env/skg-env-local/CHANGELOG.md
new file mode 100644
index 00000000..0d331045
--- /dev/null
+++ b/env/skg-env-local/CHANGELOG.md
@@ -0,0 +1,24 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-env-local-v0.4.0...skg-env-local-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+
+
+### Bug Fixes
+
+* error cascade fixes (3, 5, 6, 1) ([1930688](https://github.com/SecBear/skelegent/commit/1930688c95974eac971e902b7c616cc632a7e4f6))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/env/skg-env-local/Cargo.toml b/env/skg-env-local/Cargo.toml
index 1edd6729..e8d2e520 100644
--- a/env/skg-env-local/Cargo.toml
+++ b/env/skg-env-local/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-env-local"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/hooks/skg-hook-security/CHANGELOG.md b/hooks/skg-hook-security/CHANGELOG.md
new file mode 100644
index 00000000..7ed4b7b7
--- /dev/null
+++ b/hooks/skg-hook-security/CHANGELOG.md
@@ -0,0 +1,22 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-hook-security-v0.4.0...skg-hook-security-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* batch 1+2 consolidation ([edf5ae2](https://github.com/SecBear/skelegent/commit/edf5ae2bbe5dbb1d6f744d4463a1ccf1e96d63cb))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+
+
+### Bug Fixes
+
+* correctness and security fixes from PR review (C1, H1, H2, H4, H5, H9) ([31eaeed](https://github.com/SecBear/skelegent/commit/31eaeed06bbbdf4a020d8f225d276270395f64c2))
diff --git a/layer0/CHANGELOG.md b/layer0/CHANGELOG.md
new file mode 100644
index 00000000..fa34ac95
--- /dev/null
+++ b/layer0/CHANGELOG.md
@@ -0,0 +1,65 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/layer0-v0.4.0...layer0-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+* **layer0:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* Protocol-level identity type renamed from AgentId to OperatorId. 'Agent' in neuron is an implementation (inference loop + provider), not a protocol concept. The protocol type is Operator.
+
+### Features
+
+* add builder methods, Display impls, InferResponse conversions, and re-exports for API ergonomics ([c76ab46](https://github.com/SecBear/skelegent/commit/c76ab46c9d8cd530e9394d40c28724afeaf49119))
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* add InferRequest/InferResponse + Provider::infer() method ([f8b6b33](https://github.com/SecBear/skelegent/commit/f8b6b336d491dc8f11e47896b47c29e7a0da63bd))
+* **approval:** HITL approval protocol — typed request/response contract ([a7f0cc4](https://github.com/SecBear/skelegent/commit/a7f0cc43c3be57c15895ef43886f525e909d4ace))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* Dispatcher::dispatch takes &DispatchContext instead of &OperatorId ([5858d49](https://github.com/SecBear/skelegent/commit/5858d4925817b9f7b81624a76fd5334f872daca6))
+* DispatchHandle event interception + StreamProvider middleware ([aaa6fa0](https://github.com/SecBear/skelegent/commit/aaa6fa07d39e3912bb2551d18b0785716fad50f7))
+* DIY-first primitive decomposition for context-engine ([4764e7f](https://github.com/SecBear/skelegent/commit/4764e7f77f4e252a967a3dcb325d9d1a0b9c04f3))
+* dynamic tool availability + tool approval (AD-23, AD-24) ([de4cd16](https://github.com/SecBear/skelegent/commit/de4cd16772af4624b460256ca06f6d1b78183c3f))
+* EffectLog + EffectMiddleware + FromContext extractors + TokenCounter ([4c4bf44](https://github.com/SecBear/skelegent/commit/4c4bf44e855bd299dcdccd587c872586dd9cf691))
+* implement graph ops on InMemoryStore, add graph and effect pipeline tests ([5c057c0](https://github.com/SecBear/skelegent/commit/5c057c085fdb31e0533956f180b5d8ee1148d560))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** add Capabilities to Operator::execute — composition primitive ([e4cdc57](https://github.com/SecBear/skelegent/commit/e4cdc57b8d96053d2446f0fd187b88b1b3c3d00e))
+* **layer0:** add concrete Context type (Phase 2, Task 2.1) ([2afc4b2](https://github.com/SecBear/skelegent/commit/2afc4b2c780a0447fe9765ac88509e7771a7bbc8))
+* **layer0:** add DispatchStack, StoreStack, ExecStack middleware builders ([b2a369c](https://github.com/SecBear/skelegent/commit/b2a369c2adf8eae7504781a1ff6502044cec532a))
+* **layer0:** add Message, Role types and per-boundary middleware traits ([20234d6](https://github.com/SecBear/skelegent/commit/20234d625345a58349a30a8140379e32ade6f4de))
+* **layer0:** add Message::estimated_tokens() and text_content() helpers ([6d3a68c](https://github.com/SecBear/skelegent/commit/6d3a68cabd54e6bcf1573535b6e1fd930cbe37c7))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **layer0:** wire v2 kernel types, deprecate v1 surface ([b0b1648](https://github.com/SecBear/skelegent/commit/b0b16485fd0d4c459b32a6eeef4adc012a6a4c00))
+* memory tools + EffectLog wiring + output_schema on ToolDyn ([02ead0f](https://github.com/SecBear/skelegent/commit/02ead0f60915666e750582efd9e6b2eaf2ed3e85))
+* migrate ContextAssembler to Message type + add MessageMeta builders (Phase R.4) ([6edcf02](https://github.com/SecBear/skelegent/commit/6edcf022b2a67b4087bd4d7e7201ba1130121469))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* Phase R — reshape reusable code for middleware era ([7a5cc90](https://github.com/SecBear/skelegent/commit/7a5cc9000c4e926337c4bb41403bb0d641eb12bb))
+* RetryMiddleware crate + OperatorMeta trait ([dafaef7](https://github.com/SecBear/skelegent/commit/dafaef721c9bc59cc8803c391c852be80c4dce0f))
+* StopReason #[non_exhaustive] + ProviderMessage removal + proc macro + doc polish ([3b22a6e](https://github.com/SecBear/skelegent/commit/3b22a6eeefc4e2b9c2d0d813db9d3d4094d27ce8))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* **turn:** ToolOperator adapter, DispatchPlanner rename, ReactOperator orchestrator dispatch ([78fea8f](https://github.com/SecBear/skelegent/commit/78fea8fee9d1c7279e3993d25ad457ba91c25f14))
+* unify effects — single emission path via EffectEmitter ([b42bd36](https://github.com/SecBear/skelegent/commit/b42bd36d95a8841a8b20342819b163b2811e09d4))
+* universal middleware — InferMiddleware, recorder, MiddlewareProvider ([08a015f](https://github.com/SecBear/skelegent/commit/08a015f88f2b7fedf480faeff5c8b73e709d00b8))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+* v3.2 sweep system, hook enhancements, and extras extraction ([17d9823](https://github.com/SecBear/skelegent/commit/17d98234004632bdf19dde985518844d95dc25fd))
+* Wave 1 batch 2 — handoff detection, wire protocol, builder, test utils, schema tools ([9e7f9f5](https://github.com/SecBear/skelegent/commit/9e7f9f53584598ebd00a4ea473de0e8069297214))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+* Wave 2 — breaking InferRequest bundle + orchestration + builder + OpenAPI ([285a89d](https://github.com/SecBear/skelegent/commit/285a89daf0f88d394cf4dfb68f56e111e9f99570))
+
+
+### Bug Fixes
+
+* **context-engine:** reconcile durable orch merge ([d1f9a4c](https://github.com/SecBear/skelegent/commit/d1f9a4cfb8c89bda7fe47b6d67fd3301af03b91a))
+* error cascade fixes (3, 5, 6, 1) ([1930688](https://github.com/SecBear/skelegent/commit/1930688c95974eac971e902b7c616cc632a7e4f6))
+* error propagation, observability, and structured error responses ([d188005](https://github.com/SecBear/skelegent/commit/d18800532a051a9377be3da1def15de1b3dc733c))
+* polish primitives — wire disconnected seams, fix silent failures ([a03637d](https://github.com/SecBear/skelegent/commit/a03637d1182bb4c7b220392018fce1f119a13d3b))
+* repair pre-existing clippy lints ([278017e](https://github.com/SecBear/skelegent/commit/278017e1a23f6ec526beadad8b68acd00214f375))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+* resolve all P1 + P2 audit findings ([b255033](https://github.com/SecBear/skelegent/commit/b255033a1bba35ee9bd4541e45b08f3fdf44a4b9))
+
+
+### Code Refactoring
+
+* AgentId → OperatorId across all crates ([e033586](https://github.com/SecBear/skelegent/commit/e03358693a81998e12b250abe7b533305ab911ab))
diff --git a/layer0/Cargo.toml b/layer0/Cargo.toml
index a252731b..b7108176 100644
--- a/layer0/Cargo.toml
+++ b/layer0/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "layer0"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/op/skg-op-single-shot/CHANGELOG.md b/op/skg-op-single-shot/CHANGELOG.md
new file mode 100644
index 00000000..fe2699f1
--- /dev/null
+++ b/op/skg-op-single-shot/CHANGELOG.md
@@ -0,0 +1,27 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-op-single-shot-v0.4.0...skg-op-single-shot-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* surface reasoning_tokens in TokenUsage + update aspirational backlog ([d7456af](https://github.com/SecBear/skelegent/commit/d7456afaa2df99f382d19080cf6e495414a85828))
+
+
+### Bug Fixes
+
+* error cascade fixes (3, 5, 6, 1) ([1930688](https://github.com/SecBear/skelegent/commit/1930688c95974eac971e902b7c616cc632a7e4f6))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* final review cleanup — remove redundant effects vec, fix stale doc refs ([64291ab](https://github.com/SecBear/skelegent/commit/64291ab9377cd2677df578be24c5eba3bdc9679d))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/op/skg-op-single-shot/Cargo.toml b/op/skg-op-single-shot/Cargo.toml
index 104eff64..943d2056 100644
--- a/op/skg-op-single-shot/Cargo.toml
+++ b/op/skg-op-single-shot/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-op-single-shot"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/orch/skg-orch-kit/CHANGELOG.md b/orch/skg-orch-kit/CHANGELOG.md
new file mode 100644
index 00000000..db31a11d
--- /dev/null
+++ b/orch/skg-orch-kit/CHANGELOG.md
@@ -0,0 +1,32 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-orch-kit-v0.4.0...skg-orch-kit-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* dispatcher-first by default in CognitiveOperator (PER-159) ([98d7a09](https://github.com/SecBear/skelegent/commit/98d7a09933c511b5db73bd5d2b155e4cbe3ba0ad))
+* Dispatcher::dispatch takes &DispatchContext instead of &OperatorId ([5858d49](https://github.com/SecBear/skelegent/commit/5858d4925817b9f7b81624a76fd5334f872daca6))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* memory tools + EffectLog wiring + output_schema on ToolDyn ([02ead0f](https://github.com/SecBear/skelegent/commit/02ead0f60915666e750582efd9e6b2eaf2ed3e85))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* unify effects — single emission path via EffectEmitter ([b42bd36](https://github.com/SecBear/skelegent/commit/b42bd36d95a8841a8b20342819b163b2811e09d4))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+
+
+### Bug Fixes
+
+* **context-engine:** reconcile durable orch merge ([d1f9a4c](https://github.com/SecBear/skelegent/commit/d1f9a4cfb8c89bda7fe47b6d67fd3301af03b91a))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* resolve all P1 + P2 audit findings ([b255033](https://github.com/SecBear/skelegent/commit/b255033a1bba35ee9bd4541e45b08f3fdf44a4b9))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/orch/skg-orch-kit/Cargo.toml b/orch/skg-orch-kit/Cargo.toml
index 175983f6..3c05823a 100644
--- a/orch/skg-orch-kit/Cargo.toml
+++ b/orch/skg-orch-kit/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-orch-kit"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/orch/skg-orch-local/CHANGELOG.md b/orch/skg-orch-local/CHANGELOG.md
new file mode 100644
index 00000000..26a8337d
--- /dev/null
+++ b/orch/skg-orch-local/CHANGELOG.md
@@ -0,0 +1,25 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-orch-local-v0.4.0...skg-orch-local-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* Dispatcher::dispatch takes &DispatchContext instead of &OperatorId ([5858d49](https://github.com/SecBear/skelegent/commit/5858d4925817b9f7b81624a76fd5334f872daca6))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+
+
+### Bug Fixes
+
+* error cascade fixes (3, 5, 6, 1) ([1930688](https://github.com/SecBear/skelegent/commit/1930688c95974eac971e902b7c616cc632a7e4f6))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/orch/skg-orch-local/Cargo.toml b/orch/skg-orch-local/Cargo.toml
index 975b58fa..b0122313 100644
--- a/orch/skg-orch-local/Cargo.toml
+++ b/orch/skg-orch-local/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-orch-local"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/provider/skg-provider-anthropic/CHANGELOG.md b/provider/skg-provider-anthropic/CHANGELOG.md
new file mode 100644
index 00000000..8d54afd9
--- /dev/null
+++ b/provider/skg-provider-anthropic/CHANGELOG.md
@@ -0,0 +1,34 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-provider-anthropic-v0.4.0...skg-provider-anthropic-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* all recipe types removed from public API
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* batch 1+2 consolidation ([edf5ae2](https://github.com/SecBear/skelegent/commit/edf5ae2bbe5dbb1d6f744d4463a1ccf1e96d63cb))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* surface reasoning_tokens in TokenUsage + update aspirational backlog ([d7456af](https://github.com/SecBear/skelegent/commit/d7456afaa2df99f382d19080cf6e495414a85828))
+* tool result formatting hooks + ToolSchema.extra field ([de3b0f8](https://github.com/SecBear/skelegent/commit/de3b0f817cfe2d4eedd0488d4cb3ec568de785b3))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+* Wave 2 — breaking InferRequest bundle + orchestration + builder + OpenAPI ([285a89d](https://github.com/SecBear/skelegent/commit/285a89daf0f88d394cf4dfb68f56e111e9f99570))
+
+
+### Bug Fixes
+
+* error propagation, observability, and structured error responses ([d188005](https://github.com/SecBear/skelegent/commit/d18800532a051a9377be3da1def15de1b3dc733c))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* **provider-anthropic:** add Claude Code identity headers for subscription OAuth ([0a7dfa9](https://github.com/SecBear/skelegent/commit/0a7dfa922a2da4fb0d1a4679fc6deba977c06813))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+
+
+### Code Refactoring
+
+* delete recipe ops, skg-context crate, and compaction server ([73ec98a](https://github.com/SecBear/skelegent/commit/73ec98a46ef87f802555bbab4a318abc493e3b7a))
diff --git a/provider/skg-provider-anthropic/Cargo.toml b/provider/skg-provider-anthropic/Cargo.toml
index f5c58ac0..8bb5e7b7 100644
--- a/provider/skg-provider-anthropic/Cargo.toml
+++ b/provider/skg-provider-anthropic/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-provider-anthropic"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/provider/skg-provider-ollama/CHANGELOG.md b/provider/skg-provider-ollama/CHANGELOG.md
new file mode 100644
index 00000000..a715d6e7
--- /dev/null
+++ b/provider/skg-provider-ollama/CHANGELOG.md
@@ -0,0 +1,31 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-provider-ollama-v0.4.0...skg-provider-ollama-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* all recipe types removed from public API
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* surface reasoning_tokens in TokenUsage + update aspirational backlog ([d7456af](https://github.com/SecBear/skelegent/commit/d7456afaa2df99f382d19080cf6e495414a85828))
+* tool result formatting hooks + ToolSchema.extra field ([de3b0f8](https://github.com/SecBear/skelegent/commit/de3b0f817cfe2d4eedd0488d4cb3ec568de785b3))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+* Wave 2 — breaking InferRequest bundle + orchestration + builder + OpenAPI ([285a89d](https://github.com/SecBear/skelegent/commit/285a89daf0f88d394cf4dfb68f56e111e9f99570))
+
+
+### Bug Fixes
+
+* error propagation, observability, and structured error responses ([d188005](https://github.com/SecBear/skelegent/commit/d18800532a051a9377be3da1def15de1b3dc733c))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+
+
+### Code Refactoring
+
+* delete recipe ops, skg-context crate, and compaction server ([73ec98a](https://github.com/SecBear/skelegent/commit/73ec98a46ef87f802555bbab4a318abc493e3b7a))
diff --git a/provider/skg-provider-ollama/Cargo.toml b/provider/skg-provider-ollama/Cargo.toml
index 41fd6823..c6a35d5e 100644
--- a/provider/skg-provider-ollama/Cargo.toml
+++ b/provider/skg-provider-ollama/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-provider-ollama"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/provider/skg-provider-openai/CHANGELOG.md b/provider/skg-provider-openai/CHANGELOG.md
new file mode 100644
index 00000000..a9a97b3b
--- /dev/null
+++ b/provider/skg-provider-openai/CHANGELOG.md
@@ -0,0 +1,35 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-provider-openai-v0.4.0...skg-provider-openai-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* all recipe types removed from public API
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* batch 1+2 consolidation ([edf5ae2](https://github.com/SecBear/skelegent/commit/edf5ae2bbe5dbb1d6f744d4463a1ccf1e96d63cb))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* OpenAI Provider::embed() + pi auth integration tests ([37a1b04](https://github.com/SecBear/skelegent/commit/37a1b04770d125fe1829aa96a85135fe2a21d03c))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* surface reasoning_tokens in TokenUsage + update aspirational backlog ([d7456af](https://github.com/SecBear/skelegent/commit/d7456afaa2df99f382d19080cf6e495414a85828))
+* tool result formatting hooks + ToolSchema.extra field ([de3b0f8](https://github.com/SecBear/skelegent/commit/de3b0f817cfe2d4eedd0488d4cb3ec568de785b3))
+* universal middleware — InferMiddleware, recorder, MiddlewareProvider ([08a015f](https://github.com/SecBear/skelegent/commit/08a015f88f2b7fedf480faeff5c8b73e709d00b8))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+* Wave 2 — breaking InferRequest bundle + orchestration + builder + OpenAPI ([285a89d](https://github.com/SecBear/skelegent/commit/285a89daf0f88d394cf4dfb68f56e111e9f99570))
+
+
+### Bug Fixes
+
+* error propagation, observability, and structured error responses ([d188005](https://github.com/SecBear/skelegent/commit/d18800532a051a9377be3da1def15de1b3dc733c))
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+
+
+### Code Refactoring
+
+* delete recipe ops, skg-context crate, and compaction server ([73ec98a](https://github.com/SecBear/skelegent/commit/73ec98a46ef87f802555bbab4a318abc493e3b7a))
diff --git a/provider/skg-provider-openai/Cargo.toml b/provider/skg-provider-openai/Cargo.toml
index fece7567..cd393b7b 100644
--- a/provider/skg-provider-openai/Cargo.toml
+++ b/provider/skg-provider-openai/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-provider-openai"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/secret/skg-secret-vault/CHANGELOG.md b/secret/skg-secret-vault/CHANGELOG.md
new file mode 100644
index 00000000..a7fc4b0e
--- /dev/null
+++ b/secret/skg-secret-vault/CHANGELOG.md
@@ -0,0 +1,12 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-secret-vault-v0.4.0...skg-secret-vault-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
diff --git a/secret/skg-secret/CHANGELOG.md b/secret/skg-secret/CHANGELOG.md
new file mode 100644
index 00000000..9c4abf60
--- /dev/null
+++ b/secret/skg-secret/CHANGELOG.md
@@ -0,0 +1,14 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-secret-v0.4.0...skg-secret-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* add builder methods, Display impls, InferResponse conversions, and re-exports for API ergonomics ([c76ab46](https://github.com/SecBear/skelegent/commit/c76ab46c9d8cd530e9394d40c28724afeaf49119))
+* add SecretMiddleware with continuation-passing stack for policy, audit, and caching ([91527d0](https://github.com/SecBear/skelegent/commit/91527d0c110d5d1b1567b4c7af20fd6c56494bd2))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
diff --git a/secret/skg-secret/Cargo.toml b/secret/skg-secret/Cargo.toml
index 15a0b859..8afc04de 100644
--- a/secret/skg-secret/Cargo.toml
+++ b/secret/skg-secret/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-secret"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/skelegent/CHANGELOG.md b/skelegent/CHANGELOG.md
new file mode 100644
index 00000000..9b99e6f4
--- /dev/null
+++ b/skelegent/CHANGELOG.md
@@ -0,0 +1,32 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skelegent-v0.4.0...skelegent-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* all recipe types removed from public API
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* batch 1+2 consolidation ([edf5ae2](https://github.com/SecBear/skelegent/commit/edf5ae2bbe5dbb1d6f744d4463a1ccf1e96d63cb))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* Wave 1 batch 2 — handoff detection, wire protocol, builder, test utils, schema tools ([9e7f9f5](https://github.com/SecBear/skelegent/commit/9e7f9f53584598ebd00a4ea473de0e8069297214))
+
+
+### Bug Fixes
+
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* post-rebase consolidation ([d45208c](https://github.com/SecBear/skelegent/commit/d45208c6fdbda1c1445359242a7e50abc4c1b2bf))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+* resolve all P1 + P2 audit findings ([b255033](https://github.com/SecBear/skelegent/commit/b255033a1bba35ee9bd4541e45b08f3fdf44a4b9))
+
+
+### Code Refactoring
+
+* delete recipe ops, skg-context crate, and compaction server ([73ec98a](https://github.com/SecBear/skelegent/commit/73ec98a46ef87f802555bbab4a318abc493e3b7a))
diff --git a/skelegent/Cargo.toml b/skelegent/Cargo.toml
index 89e7d136..fa80beae 100644
--- a/skelegent/Cargo.toml
+++ b/skelegent/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skelegent"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/state/skg-state-fs/CHANGELOG.md b/state/skg-state-fs/CHANGELOG.md
new file mode 100644
index 00000000..5ae2f6dd
--- /dev/null
+++ b/state/skg-state-fs/CHANGELOG.md
@@ -0,0 +1,13 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-state-fs-v0.4.0...skg-state-fs-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
diff --git a/state/skg-state-fs/Cargo.toml b/state/skg-state-fs/Cargo.toml
index ab22fde0..30dee9e3 100644
--- a/state/skg-state-fs/Cargo.toml
+++ b/state/skg-state-fs/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-state-fs"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/state/skg-state-memory/CHANGELOG.md b/state/skg-state-memory/CHANGELOG.md
new file mode 100644
index 00000000..98286683
--- /dev/null
+++ b/state/skg-state-memory/CHANGELOG.md
@@ -0,0 +1,13 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-state-memory-v0.4.0...skg-state-memory-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
diff --git a/state/skg-state-memory/Cargo.toml b/state/skg-state-memory/Cargo.toml
index c530f71c..2ac7e28b 100644
--- a/state/skg-state-memory/Cargo.toml
+++ b/state/skg-state-memory/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-state-memory"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/turn/skg-context/CHANGELOG.md b/turn/skg-context/CHANGELOG.md
new file mode 100644
index 00000000..477f128c
--- /dev/null
+++ b/turn/skg-context/CHANGELOG.md
@@ -0,0 +1,19 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-context-v0.4.0...skg-context-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* all recipe types removed from public API
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+
+
+### Code Refactoring
+
+* delete recipe ops, skg-context crate, and compaction server ([73ec98a](https://github.com/SecBear/skelegent/commit/73ec98a46ef87f802555bbab4a318abc493e3b7a))
diff --git a/turn/skg-mcp/CHANGELOG.md b/turn/skg-mcp/CHANGELOG.md
new file mode 100644
index 00000000..dd443c8b
--- /dev/null
+++ b/turn/skg-mcp/CHANGELOG.md
@@ -0,0 +1,27 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-mcp-v0.4.0...skg-mcp-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **layer0:** wire v2 kernel types, deprecate v1 surface ([b0b1648](https://github.com/SecBear/skelegent/commit/b0b16485fd0d4c459b32a6eeef4adc012a6a4c00))
+* memory tools + EffectLog wiring + output_schema on ToolDyn ([02ead0f](https://github.com/SecBear/skelegent/commit/02ead0f60915666e750582efd9e6b2eaf2ed3e85))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* thread DispatchContext through MCP tool calls and server ([15de639](https://github.com/SecBear/skelegent/commit/15de639b9c0ca9541e056807ddac8d345650c215))
+* Wave 1 batch 2 — handoff detection, wire protocol, builder, test utils, schema tools ([9e7f9f5](https://github.com/SecBear/skelegent/commit/9e7f9f53584598ebd00a4ea473de0e8069297214))
+
+
+### Bug Fixes
+
+* exclude autoexamples from workspace root package ([93a0139](https://github.com/SecBear/skelegent/commit/93a01397b05e5f3b4c4622b3143809113586955b))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/turn/skg-mcp/Cargo.toml b/turn/skg-mcp/Cargo.toml
index bec50932..4f7ee520 100644
--- a/turn/skg-mcp/Cargo.toml
+++ b/turn/skg-mcp/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-mcp"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/turn/skg-tool/CHANGELOG.md b/turn/skg-tool/CHANGELOG.md
new file mode 100644
index 00000000..5583a527
--- /dev/null
+++ b/turn/skg-tool/CHANGELOG.md
@@ -0,0 +1,31 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-tool-v0.4.0...skg-tool-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+* **layer0:** Orchestrator now requires Dispatcher supertrait. Capabilities struct removed. execute() reverted to single-param.
+
+### Features
+
+* add DispatchContext and thread through all trait signatures ([37a1766](https://github.com/SecBear/skelegent/commit/37a1766c45dabc29399223735cb4d69ba4d16aaf))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* Dispatcher::dispatch takes &DispatchContext instead of &OperatorId ([5858d49](https://github.com/SecBear/skelegent/commit/5858d4925817b9f7b81624a76fd5334f872daca6))
+* **layer0, context-engine:** add EffectEmitter and CognitiveOperator ([3cb67af](https://github.com/SecBear/skelegent/commit/3cb67afa425339deec5e71dbcf983809f1cfc75c))
+* **layer0:** Orchestrator extends Dispatcher — one invocation primitive ([4eafc11](https://github.com/SecBear/skelegent/commit/4eafc110dd6e798665c2c420f1e83037b24a7017))
+* **layer0:** wire v2 kernel types, deprecate v1 surface ([b0b1648](https://github.com/SecBear/skelegent/commit/b0b16485fd0d4c459b32a6eeef4adc012a6a4c00))
+* memory tools + EffectLog wiring + output_schema on ToolDyn ([02ead0f](https://github.com/SecBear/skelegent/commit/02ead0f60915666e750582efd9e6b2eaf2ed3e85))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* **PER-164,PER-31,PER-193:** v2 fitness checks, compaction MCP server, declarative system design ([35fc486](https://github.com/SecBear/skelegent/commit/35fc4864e8347367706b1df7e35f067b4acd2b79))
+* streaming dispatch as layer0 primitive ([6117665](https://github.com/SecBear/skelegent/commit/6117665f586110bdcac64c438e63bf7631860361))
+* Wave 1 batch 2 — handoff detection, wire protocol, builder, test utils, schema tools ([9e7f9f5](https://github.com/SecBear/skelegent/commit/9e7f9f53584598ebd00a4ea473de0e8069297214))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+
+
+### Bug Fixes
+
+* correctness and security fixes from PR review (C1, H1, H2, H4, H5, H9) ([31eaeed](https://github.com/SecBear/skelegent/commit/31eaeed06bbbdf4a020d8f225d276270395f64c2))
+* error cascade fixes (3, 5, 6, 1) ([1930688](https://github.com/SecBear/skelegent/commit/1930688c95974eac971e902b7c616cc632a7e4f6))
+* update all Operator::execute call sites for Capabilities parameter ([dc761cc](https://github.com/SecBear/skelegent/commit/dc761cccc2014d63e362522dd84769c0458f6dc4))
diff --git a/turn/skg-tool/Cargo.toml b/turn/skg-tool/Cargo.toml
index 9efb5dd6..469f428b 100644
--- a/turn/skg-tool/Cargo.toml
+++ b/turn/skg-tool/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-tool"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
diff --git a/turn/skg-turn-kit/CHANGELOG.md b/turn/skg-turn-kit/CHANGELOG.md
new file mode 100644
index 00000000..aec81902
--- /dev/null
+++ b/turn/skg-turn-kit/CHANGELOG.md
@@ -0,0 +1,12 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-turn-kit-v0.4.0...skg-turn-kit-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
diff --git a/turn/skg-turn/CHANGELOG.md b/turn/skg-turn/CHANGELOG.md
new file mode 100644
index 00000000..73fdd0eb
--- /dev/null
+++ b/turn/skg-turn/CHANGELOG.md
@@ -0,0 +1,35 @@
+# Changelog
+
+## [1.0.0](https://github.com/SecBear/skelegent/compare/skg-turn-v0.4.0...skg-turn-v1.0.0) (2026-04-08)
+
+
+### ⚠ BREAKING CHANGES
+
+* move DynProvider to skg-turn with blanket impl
+* **orch:** Operator::execute now takes &Capabilities as second parameter. All Operator implementations must be updated.
+
+### Features
+
+* add builder methods, Display impls, InferResponse conversions, and re-exports for API ergonomics ([c76ab46](https://github.com/SecBear/skelegent/commit/c76ab46c9d8cd530e9394d40c28724afeaf49119))
+* dispatcher-backed tool execution in context engine (PER-162) ([a3c343d](https://github.com/SecBear/skelegent/commit/a3c343d9cd5cf3e58fc5e1ae8380c2a82b460011))
+* EffectLog + EffectMiddleware + FromContext extractors + TokenCounter ([4c4bf44](https://github.com/SecBear/skelegent/commit/4c4bf44e855bd299dcdccd587c872586dd9cf691))
+* **orch:** durable orchestration core — portable run/control contracts ([#65](https://github.com/SecBear/skelegent/issues/65)) ([adc9ada](https://github.com/SecBear/skelegent/commit/adc9adaadd0a9d45d134c8e2377735af74686b31))
+* Provider::embed(), Checkpoint primitive, embedding types ([dd6e2bb](https://github.com/SecBear/skelegent/commit/dd6e2bb03b27e04f4011f65ce680cea2deda700b))
+* surface reasoning_tokens in TokenUsage + update aspirational backlog ([d7456af](https://github.com/SecBear/skelegent/commit/d7456afaa2df99f382d19080cf6e495414a85828))
+* tool result formatting hooks + ToolSchema.extra field ([de3b0f8](https://github.com/SecBear/skelegent/commit/de3b0f817cfe2d4eedd0488d4cb3ec568de785b3))
+* universal middleware — InferMiddleware, recorder, MiddlewareProvider ([08a015f](https://github.com/SecBear/skelegent/commit/08a015f88f2b7fedf480faeff5c8b73e709d00b8))
+* v0.5 breaking bundle — streaming + effects + memory scoping ([96ffec9](https://github.com/SecBear/skelegent/commit/96ffec955db60afb6851ff612266dee018ff0eb0))
+* Wave 1 batch 2 — handoff detection, wire protocol, builder, test utils, schema tools ([9e7f9f5](https://github.com/SecBear/skelegent/commit/9e7f9f53584598ebd00a4ea473de0e8069297214))
+* Wave 1 design roadmap implementation ([cb15f7b](https://github.com/SecBear/skelegent/commit/cb15f7b5e2d1bf88e22ebbb71ebabf5fdf1cf37b))
+* Wave 2 — breaking InferRequest bundle + orchestration + builder + OpenAPI ([285a89d](https://github.com/SecBear/skelegent/commit/285a89daf0f88d394cf4dfb68f56e111e9f99570))
+
+
+### Bug Fixes
+
+* error propagation, observability, and structured error responses ([d188005](https://github.com/SecBear/skelegent/commit/d18800532a051a9377be3da1def15de1b3dc733c))
+* resolve all blocking PR review issues ([aeab2c2](https://github.com/SecBear/skelegent/commit/aeab2c2b7cacafaed67a570ad46985aed4618f20))
+
+
+### Code Refactoring
+
+* move DynProvider to skg-turn with blanket impl ([b2d72c1](https://github.com/SecBear/skelegent/commit/b2d72c16065f36e9aea8cd1b6b746f3a5079de95))
diff --git a/turn/skg-turn/Cargo.toml b/turn/skg-turn/Cargo.toml
index 663a21b1..2997e687 100644
--- a/turn/skg-turn/Cargo.toml
+++ b/turn/skg-turn/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "skg-turn"
-version = "0.4.1"
+version = "1.0.0"
 edition.workspace = true
 license.workspace = true
 repository.workspace = true