diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2e5543f..3139f1c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ contract.
 
 ## [Unreleased]
 
+## [0.1.3] - 2026-09-15
+
+- Record extra-approval false on `main` so a later ruleset apply cannot default
+  the unattributed-agent gate back on. GitHub treats Cursor co-authors as
+  unattributed.
+
 ## [0.1.2] - 2026-09-13
 
 - Stamp downloaded release binaries with the exact release version; local source builds retain `dev`.
diff --git a/README.md b/README.md
index 1b8bf37..995f547 100644
--- a/README.md
+++ b/README.md
@@ -23,7 +23,7 @@ protocol, scheduler, or operating-system sandbox.
 Requires Go 1.25 or newer.
 
 ```sh
-go install github.com/NDDev-OpenNetwork/agent-runtime/cmd/agent-runtime@v0.1.2
+go install github.com/NDDev-OpenNetwork/agent-runtime/cmd/agent-runtime@v0.1.3
 agent-runtime task validate --manifest examples/basic/agent.json --workspace examples/basic
 agent-runtime task run --manifest examples/basic/agent.json --workspace examples/basic
 ```
@@ -93,7 +93,7 @@ The GitHub Release additionally carries `agent-runtime` CLI binaries for linux
 and darwin on both architectures, plus `SHA256SUMS`. Check a downloaded archive
 against that file before running it.
 
-The current release is `v0.1.2`; the line started at `v0.1.1`: this module path is
+The current release is `v0.1.3`; the line started at `v0.1.1`: this module path is
 new, so numbering from the repository it grew out of does not carry over.
 
 See [`docs/releasing.md`](docs/releasing.md) for the steps and for why a tag is