diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2e4edfa..d793a43 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Record the `v0.1.0-canary.3` GitHub prerelease.
+
 - Refresh README and AGENTS guidance: vllnt introduction, current canary status and install evidence, directory submission state, and asset ownership.
 
 ## 0.1.0-canary.3
diff --git a/README.md b/README.md
index 4ef1dcf..01b053d 100644
--- a/README.md
+++ b/README.md
@@ -151,7 +151,7 @@ Live testing caught a generated-help false hold and post-push PR-head propagatio
 
 Claude Code 2.1.283 (2026-09-27): `claude plugin validate` passes for the catalog and plugin; a local-directory marketplace install into an isolated configuration installed `vstack@vllnt-stack` 0.1.0-canary.1 with all 22 skills, and a maintainer session with the local install listed every `vstack:*` skill. After `vllnt/stack` became public (merge `c3ad08c08fe460ed4f2e1a40630afe4001ddd23c`), an anonymous clone succeeded, and the CLI equivalents `claude plugin marketplace add vllnt/stack` plus `claude plugin install vstack@vllnt-stack` in a clean, credential-free configuration installed `0.1.0-canary.1` from the GitHub source; a headless session there listed exactly the 22 `vstack:*` skills. The same commands after merge `915a4d0d519d726f84185ec698b3ed3f4c925cb8` installed `0.1.0-canary.3` with its icon, updated description, and 22 skills. The in-chat `/plugin` forms were not run separately. Skill invocation behavior (including `plan-work` staying read-only), automatic skill selection, and the rest of the acceptance checklist remain unverified.
 
-**Codex and Cursor installation, and startup/context-loss behavior in every host, remain unverified.** The repository is public and installable as a GitHub marketplace. A Claude plugin directory submission is in validation and is not listed yet. No release tag or automatic Claude/Codex principle loading exists.
+**Codex and Cursor installation, and startup/context-loss behavior in every host, remain unverified.** The repository is public and installable as a GitHub marketplace. A Claude plugin directory submission is in validation and is not listed yet. [`v0.1.0-canary.3`](https://github.com/vllnt/stack/releases/tag/v0.1.0-canary.3) is published as a GitHub prerelease; releases are created manually. No automatic Claude/Codex principle loading exists.
 
 Host format sources consulted during initialization: