diff --git a/CLAUDE.md b/CLAUDE.md
index e6a5361..05a98c7 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -46,7 +46,7 @@ sidecar). By default (no `DB_TYPE`/`DB_PATH` set) the service uses an in-memory
 ### Two audiences, two packages
 
 - **`internal/`** — the Argus *service* itself (API, DB, pipeline). Not importable by other projects.
-- **`pkg/audit`** — the *client library* other Go services import (`go get github.com/LSFLK/argus/pkg/audit`)
+- **`pkg/audit`** — the *client library* other Go services import (`go get github.com/LSFLK/argus/pkg/audit@latest`). Always pin a tagged release; do not use commit pseudo-versions.
   to send audit events to a running Argus instance. This is a separate logical module from the service;
   don't leak service-internal types into it, and don't assume service-side dependencies (GORM, sinks) are
   available here. `pkg/audit/security.go` implements client-side request signing (RSA/Ed25519) that mirrors
diff --git a/README.md b/README.md
index 7db22a2..c09d547 100644
--- a/README.md
+++ b/README.md
@@ -31,7 +31,7 @@
 
 ### Step 1: Add Argus to your project
 ```bash
-go get github.com/LSFLK/argus/pkg/audit
+go get github.com/LSFLK/argus/pkg/audit@latest
 ```
 
 ### Step 2: Initialize the hardened audit client
@@ -69,7 +69,7 @@ Argus is designed to be the centralized audit source of truth for any microservi
 ### 1. Installation
 In your application:
 ```bash
-go get github.com/LSFLK/argus/pkg/audit
+go get github.com/LSFLK/argus/pkg/audit@latest
 ```
 
 ### 2. Global Initialization
diff --git a/go.mod b/go.mod
index a13edf1..07bc31c 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/LSFLK/argus
 go 1.24.6
 
 require (
-	github.com/LSFLK/argus/pkg/audit v0.0.0-20260429052721-d7d03100b319
+	github.com/LSFLK/argus/pkg/audit v1.0.0
 	github.com/aws/aws-sdk-go-v2 v1.41.7
 	github.com/aws/aws-sdk-go-v2/config v1.32.17
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.101.0
diff --git a/go.sum b/go.sum
index 369e930..c2edc58 100644
--- a/go.sum
+++ b/go.sum
@@ -1,5 +1,5 @@
-github.com/LSFLK/argus/pkg/audit v0.0.0-20260429052721-d7d03100b319 h1:Z2+3T4pxTjOiXnZa7W/OsYLl6NaHetpUNv3VoCc3W20=
-github.com/LSFLK/argus/pkg/audit v0.0.0-20260429052721-d7d03100b319/go.mod h1:VPLkj7lPFOPSTNZulUsf+OCWcjz9vdndCRhcc2hfQjM=
+github.com/LSFLK/argus/pkg/audit v1.0.0 h1:iM0nC7k/l3adpg7ywKZ/ar4gphiPL2F5kA+au6WzMl4=
+github.com/LSFLK/argus/pkg/audit v1.0.0/go.mod h1:VPLkj7lPFOPSTNZulUsf+OCWcjz9vdndCRhcc2hfQjM=
 github.com/aws/aws-sdk-go-v2 v1.41.7 h1:DWpAJt66FmnnaRIOT/8ASTucrvuDPZASqhhLey6tLY8=
 github.com/aws/aws-sdk-go-v2 v1.41.7/go.mod h1:4LAfZOPHNVNQEckOACQx60Y8pSRjIkNZQz1w92xpMJc=
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.10 h1:gx1AwW1Iyk9Z9dD9F4akX5gnN3QZwUB20GGKH/I+Rho=