diff --git a/CHANGELOG.md b/CHANGELOG.md
index fe75720..a27ba1d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
# Changelog
+## 1.0.0
+
+Product version 1.0.0 includes record, table-list and text print processes,
+PDF rendering with headers and footers, the least-privilege operator catalog,
+reported Windows queue-default media (`printer-media-v1`) and the opt-in retained-source
+facade. Native printing stays **2.3.0** with wire payload v1; 1.0 is a product version, not a
+wire change, and it pairs with Windows connector 1.0.1 and protocol 1.0.0. The QQQ dependency
+is the published 4.1.0-RC.21 candidate, which provides native session login.
+
## 0.4.0-rc.1
Printing extension **2.3.0** (additive; wire payload v1 and the agent subprotocol are
diff --git a/README.md b/README.md
index 112f0ad..3e5630c 100644
--- a/README.md
+++ b/README.md
@@ -1,8 +1,8 @@
# QQQ Printing
-Cloud printing for QQQ 4.1+, paired with the [Windows AppKit connector](https://github.com/QRun-IO/qqq-print-agent) and the [shared protocol](https://github.com/QRun-IO/qqq-print-protocol). The Windows connector opens an outbound, authenticated two-way WebSocket; documents download separately over HTTPS. The cloud needs no inbound route into the facility. Release candidate **0.3.0-rc.1** requires native printing API **2.0**, with no job/control polling fallback. Upgrade the server before the matching Windows connector.
+Cloud printing for QQQ 4.1+, paired with the [Windows AppKit connector](https://git.kof22.com/QRun-IO/qqq-print-agent) 1.0.1 and the [shared protocol](https://git.kof22.com/QRun-IO/qqq-print-protocol) 1.0.0. The Windows connector opens an outbound, authenticated two-way WebSocket; documents download separately over HTTPS. The cloud needs no inbound route into the facility. Version **1.0.0** supports native printing **2.3**, wire payload v1, real-time jobs and controls, and native browser sign-in through QQQ. Upgrade the server before the matching Windows connector.
-**Prerelease software**, tested against QQQ **4.1.0-RC.20** and Java 21. Current release candidate: [**0.3.0-rc.1**](https://github.com/QRun-IO/qbit-printing/releases/tag/v0.3.0-rc.1). The previous [**0.2.0-rc.1**](https://github.com/QRun-IO/qbit-printing/releases/tag/v0.2.0-rc.1) tagged build passed 110 tests and zero Checkstyle violations. The optional native UI demo uses QQQ frontend **1.0.0-RC.37**. GitHub releases provide a library JAR, POM and SHA-256 checksums, with build attestations for all three assets. Verify the exact downloaded release; publication does not establish installed or physical-output acceptance. This repository does not claim Maven Central publication or provide a standalone executable/fat JAR.
+**Current dependency:** QQQ **4.1.0-RC.21**, published on Maven Central with native session login, and Java 21. See the [printing releases](https://git.kof22.com/QRun-IO/qbit-printing/releases) for downloads. The optional native UI demo uses QQQ frontend **1.0.0-RC.37**. GitHub releases provide a library JAR, POM and SHA-256 checksums, with build attestations for all three assets. Verify the exact downloaded release; publication does not establish installed or physical-output acceptance. This repository does not claim Maven Central publication or provide a standalone executable/fat JAR.
Implemented: single-use enrollment, device credentials, inventory/approval, PDF/ZPL submission, durable JDBC queue, idempotency, claim/content/events, native QQQ setup/test-print processes, read-only device/printer/job tables and a durable enqueue effect target.
diff --git a/docs/SESSION-STATE.md b/docs/SESSION-STATE.md
index 8aa82c8..03ee8a9 100644
--- a/docs/SESSION-STATE.md
+++ b/docs/SESSION-STATE.md
@@ -1,5 +1,15 @@
# Session state — 2026-10-31
+## CURRENT checkpoint — 1.0.0 release preparation (2026-11-03)
+
+The release branch includes the primary head `a583f91` and the prepared 1.0.0 version. Windows connector 1.0.1
+and protocol 1.0.0 are published. The QQQ pin is now the published `4.1.0-RC.21` candidate that provides native
+session login; its BOM was independently retrieved from Maven Central. The existing `-Pui-demo verify` gate
+passed against that dependency on 2026-11-03: 193 tests reported, zero failures or errors, one existing opt-in
+workload skip and zero Checkstyle violations. Main and test sources compile under the existing Error Prone,
+NullAway and warnings-as-errors checks. Printing 1.0.0 publication remains pending its normal CI and release
+process. Every checklist below is historical.
+
## Standards and small-label release cohort — 2026-11-01
The strict standards tree (commit `43253f6`) combines the 2.3.0 operator/media/retained source with the
diff --git a/docs/TODO.md b/docs/TODO.md
index 9d675de..c554d9f 100644
--- a/docs/TODO.md
+++ b/docs/TODO.md
@@ -1,5 +1,11 @@
# Follow-up
+## CURRENT — 1.0.0 (everything below this section is historical)
+
+- [x] Adopt the published QQQ `4.1.0-RC.21` candidate in `pom.xml` and the active release documentation; the BOM resolves from Maven Central.
+- [x] Complete the existing normal verification (`./mvnw -Pui-demo verify`) against RC.21: 193 tests reported, zero failures/errors, one existing opt-in workload skip and zero Checkstyle violations.
+- [ ] Complete the existing normal publication of `1.0.0` after its required CI checks.
+
## Echo integration candidate
- [x] Implement authorized operator catalog, native submission/process permission,
diff --git a/pom.xml b/pom.xml
index 9cfff30..6a8cf14 100644
--- a/pom.xml
+++ b/pom.xml
@@ -9,13 +9,13 @@
com.kingsrookqbit-build-parent2.0.0
com.kingsrook.qbits
qbit-printing
- 0.4.0-rc.1
+ 1.0.0
QQQ Printing
Apache License, Version 2.0https://www.apache.org/licenses/LICENSE-2.0
21
UTF-8
- 4.1.0-RC.20
+ 4.1.0-RC.21
none