diff --git a/CHANGELOG.md b/CHANGELOG.md
index ca7763d..43bb58e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -29,6 +29,8 @@ CI. The v0.3 `guard` proxy adds deterministic runtime *result* inspection
 
 ## [Unreleased]
 
+## [1.1.0] — 2026-07-14
+
 ### Added
 
 - **Injection-phrase FP-instrumentation (Refs #12).** Shippable, non-default-changing
@@ -186,6 +188,7 @@ v1-strong foundation. Highlights of the 0.3.0 → 1.0.0 arc:
   declared surface, RFC 8785 (JCS) + SHA-256 canonicalization, SARIF output, and a live
   integrity-gate workflow with committed `clean.warden.lock`.
 
-[Unreleased]: https://github.com/DataScience-EngineeringExperts/mcp-warden/compare/v1.0.1...HEAD
+[Unreleased]: https://github.com/DataScience-EngineeringExperts/mcp-warden/compare/v1.1.0...HEAD
+[1.1.0]: https://github.com/DataScience-EngineeringExperts/mcp-warden/compare/v1.0.1...v1.1.0
 [1.0.1]: https://github.com/DataScience-EngineeringExperts/mcp-warden/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/DataScience-EngineeringExperts/mcp-warden/releases/tag/v1.0.0
diff --git a/pyproject.toml b/pyproject.toml
index 6afd437..d8d94fc 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@
 # `mcp-warden` — install `mcp-warden-cli`, then run `mcp-warden ...`. See README
 # impostor warning + CHANGELOG.
 name = "mcp-warden-cli"
-version = "1.0.1"
+version = "1.1.0"
 description = "CI-first MCP supply-chain integrity gate: pin and verify the declared tool/resource/prompt surface of an MCP server, plus runtime tool-result inspection (guard/inspect)."
 readme = "README.md"
 requires-python = ">=3.11"
diff --git a/src/mcp_warden/__init__.py b/src/mcp_warden/__init__.py
index d61026e..82353c3 100644
--- a/src/mcp_warden/__init__.py
+++ b/src/mcp_warden/__init__.py
@@ -7,7 +7,7 @@
 on runtime tool behavior or tool results. See ``docs/THREAT_MODEL.md``.
 """
 
-__version__ = "1.0.1"
+__version__ = "1.1.0"
 #: Lock schema version. Bumped 2 → 3 for #29 (in-document ``$ref`` resolution in
 #: ``schema_diff.extract_skeleton``). Following refs changes the skeleton of any
 #: ref-using tool → its ``entry_digest`` and the ``overall_digest`` (which embeds