diff --git a/AGENTS.md b/AGENTS.md
index 910e1da..6eabdfe 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -62,3 +62,24 @@ report = await sync_from_directory(session, lfx, settings.flows_dir)
 ## Git
 
 When committing: `git add -A && git commit -m "<message>"` (conventional commits: `feat:`, `fix:`, `chore:`, `docs:`). When pushing: `git push` (branch is tracking `origin/main`).
+
+## Versioning
+
+- `VERSION` (repo root) is canonical — currently `0.1.0`.
+- Backend: `backend/pyproject.toml` version; Frontend: `frontend/package.json` version — bump both together with VERSION on every release.
+- SemVer: feat → minor (X.Y+1.0), fix → patch (X.Y.Z+1), breaking → major (X+1.0.0). Tag `vX.Y.Z` at release merge.
+- Changelog: every user-visible change gets an `[Unreleased]` entry (Keep a Changelog categories) before commit; at release move it into `[X.Y.Z] - YYYY-MM-DD`.
+
+## Git workflow
+
+- New work branches from `main`: `feat/<short>` for features, `fix/<short>` for fixes.
+- Push branch, open MR, merge `--no-ff` on green CI, delete branch.
+- Never push directly to `main` for features or fixes.
+
+## Web-dev digest
+
+- Small batches: PR diff ≤ ~200 lines ideal; trunk-based with short-lived branches (above).
+- Tests green before merge (definition of done); `npm run build` green for frontend.
+- Docs in same PR as feature (README, AGENTS, CHANGELOG).
+- Deprecate in minor, remove in next major; document Removed/Deprecated in CHANGELOG.
+- Lockfiles (uv.lock, package-lock.json, compose pins) — don't drift without reason.
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..a05f811
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,17 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-09-13
+### Added
+- Repo scaffold: docker-compose dev/prod, version-pinned images, devcontainer.
+- Magic-link auth, access requests, RBAC, frontend access-management UI.
+- File-based flow source of truth + sync engine + LFX runtime.
+- RJSF dynamic forms, router, Mantine dark-mode design system.
+- Conversion landing page, automated screenshots, bell-tower favicon.
+- Email-first login, branded multipart HTML magic-link mails.
+- lfx level-4 validation on all canonical flows + regression test.
diff --git a/VERSION b/VERSION
new file mode 100644
index 0000000..6e8bf73
--- /dev/null
+++ b/VERSION
@@ -0,0 +1 @@
+0.1.0