diff --git a/.github/workflows/release-assets.yml b/.github/workflows/release-assets.yml
index d588d19..aca7d01 100644
--- a/.github/workflows/release-assets.yml
+++ b/.github/workflows/release-assets.yml
@@ -60,12 +60,16 @@ jobs:
         # Standard, verifiable, automatable: GitHub attests that these bytes
         # were produced by this workflow, in this repository, at this commit.
         # Clients verify with `gh attestation verify <file> -R <repo>`.
+        # The V3 manifest is a published asset like the others: it is attested
+        # too (v2.5.0 shipped without this line and its manifest has no
+        # attestation; it is never replaced retroactively - #185).
         uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
         with:
           subject-path: |
             dist/*.whl
             dist/*.tar.gz
             dist/*.zip
+            dist/*.json
       - name: Create the release as a draft
         # Draft first: a release uploaded asset by asset is briefly visible
         # with a partial set. Nothing is published until every asset is up and
diff --git a/docs/MULTIFORGE-QUALIFICATION.md b/docs/MULTIFORGE-QUALIFICATION.md
index 90328f4..31451c5 100644
--- a/docs/MULTIFORGE-QUALIFICATION.md
+++ b/docs/MULTIFORGE-QUALIFICATION.md
@@ -77,12 +77,23 @@ Declared support never exceeds qualified support (`SUPPORT.md`, ADR-0019 §13).
 
 ## Known limitations and remaining work
 
+**v2.5.0 publication — manifest attestation missing (fixed for the next
+release, #185):** the release workflow's `subject-path` did not include
+`dist/*.json`, so the published `ainative-release-v3.json` of v2.5.0 has no
+build-provenance attestation (`gh attestation verify` returns 404 for its
+digest). The bundle *is* attested. The manifest remains covered by
+`SHA256SUMS` and by GitHub's asset metadata — which is exactly the anchor the
+runtime verifies — and the published v2.5.0 assets are **never replaced
+retroactively**. The workflow now attests every published asset; the next
+release must show a verifiable manifest attestation.
+
 **P1 — the declared-support gate:**
 - Full CI matrix (Linux/Windows/macOS, py3.11/3.13) — runs on the `dev`
   proposals; every run so far has been green (52/52, then 76/76).
-- The V2 bridge release and the V3 release have not been published: the plan's
-  release choreography (§92) starts after the branch is promoted to `dev`, and
-  the first V3 publication stays gated by `V3_BRIDGE_RELEASE`.
+- The V2 bridge release (2.4.4) and the V3 release (2.5.0) are now published
+  and verified; `V3_BRIDGE_RELEASE=2.4.4` is set repository-side, so the
+  first V3 publication gate is validated for real. The full report refresh
+  lands separately from this fix (#185).
 
 **Resolved since the first draft of this report:** the GitLab.com **live**
 qualification (scenario B), scenario Q (mandatory secret patterns with
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
index e9a488e..7b265c1 100644
--- a/docs/RELEASING.md
+++ b/docs/RELEASING.md
@@ -38,7 +38,8 @@ The **Release assets** workflow then runs, in order:
    variable is never treated as proof of a V2 release;
 6. `SHA256SUMS` is written;
 7. **build provenance is attested** for every artifact
-   (`actions/attest-build-provenance`): GitHub signs a statement that these
+   (`actions/attest-build-provenance`) — wheel, sdist, lifecycle bundle **and
+   the V3 manifest** (`dist/*.json`): GitHub signs a statement that these
    bytes came from this workflow, this repository, this commit;
 8. the release is created as a **draft**, assets are uploaded (no `--clobber`),
    `check_published_assets.py` compares the uploaded names, sizes and digests