diff --git a/CHANGELOG.md b/CHANGELOG.md
index 83f6c45..4fa4a5f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,28 @@ including claims a later release made false.
 
 ## [Unreleased]
 
+## [0.0.4] - 2026-08-25
+
+Two operations that were one, and three provenance fields that were null.
+
+- `software_install` and `software_update` produced byte-identical plans. The
+  plan phase may read the local disk, so what is already under `--prefix` is in
+  it now: installing over the same version says so, updating from an older one
+  says which, and updating a prefix that holds nothing is refused rather than
+  quietly installing. `software_remove` names the versions it leaves.
+- `component_refs`, `setup_stable_id` and `setup_version` were written empty for
+  every bundle install, and the bundle carried all three. `setup-passport.json`
+  is a required member of the format that this reader required and then
+  discarded, so a target configured over the wire reported no applied setup
+  while the same target from the local catalogue reported one.
+  `setup_version_passport_digest` stays null on purpose: the passport does not
+  carry its own digest and the contract does not define how one is taken.
+- Antigravity ships a first-party `nddev-builder` setup: one native plugin
+  carrying one skill about where this product's configuration lives inside a
+  home it shares with Gemini CLI, and which neighbouring files are not its own.
+
+Linux, macOS and Windows; x86_64 and arm64.
+
 ## [0.0.3] - 2026-08-25
 
 Starts Codex CLI, and takes over a target the estate before this one
diff --git a/Cargo.lock b/Cargo.lock
index a8d403f..ad9869e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -25,7 +25,7 @@ checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
 [[package]]
 name = "codex-setup-system"
-version = "0.0.3"
+version = "0.0.4"
 dependencies = [
  "harness-runtime",
  "provider-v3",
@@ -76,7 +76,7 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
 
 [[package]]
 name = "harness-runtime"
-version = "0.0.3"
+version = "0.0.4"
 dependencies = [
  "provider-v3",
  "serde",
@@ -147,7 +147,7 @@ dependencies = [
 
 [[package]]
 name = "provider-v3"
-version = "0.0.3"
+version = "0.0.4"
 dependencies = [
  "serde",
  "serde_json",
@@ -209,7 +209,7 @@ dependencies = [
 
 [[package]]
 name = "setup-core"
-version = "0.0.3"
+version = "0.0.4"
 dependencies = [
  "miniz_oxide",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index a58f7ea..9d79451 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,7 +8,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.0.3"
+version = "0.0.4"
 edition = "2024"
 rust-version = "1.89"
 license = "AGPL-3.0-or-later"
@@ -23,9 +23,9 @@ sha2 = "0.11"
 # `setup-core::archive`); an inflate loop is not, because its bugs are
 # memory-safety bugs and it is not improved by being hand-written here.
 miniz_oxide = "0.9"
-setup-core = { path = "crates/setup-core", version = "0.0.3" }
-provider-v3 = { path = "crates/provider-v3", version = "0.0.3" }
-harness-runtime = { path = "crates/harness-runtime", version = "0.0.3" }
+setup-core = { path = "crates/setup-core", version = "0.0.4" }
+provider-v3 = { path = "crates/provider-v3", version = "0.0.4" }
+harness-runtime = { path = "crates/harness-runtime", version = "0.0.4" }
 
 [workspace.lints.rust]
 unsafe_code = "forbid"
diff --git a/README.md b/README.md
index 3c00b7c..8e79d3f 100644
--- a/README.md
+++ b/README.md
@@ -151,7 +151,7 @@ release is a convenience, not the authorised copy.
 
 ```bash
 docker run --rm -v "$HOME/.config:/config" \
-  ghcr.io/nddev-opennetwork/codex-setup-system:0.0.3 \
+  ghcr.io/nddev-opennetwork/codex-setup-system:0.0.4 \
   status --target /config/<dir> --json
 ```
 
diff --git a/install.ps1 b/install.ps1
index 0782b95..4a761ed 100644
--- a/install.ps1
+++ b/install.ps1
@@ -7,7 +7,7 @@
 #   powershell -ExecutionPolicy Bypass -File install.ps1 -Version 0.1.0
 [CmdletBinding()]
 param(
-  [string]$Version = "0.0.3",
+  [string]$Version = "0.0.4",
   [string]$InstallDir = "$env:LOCALAPPDATA\Programs\codex-setup-system"
 )
 $ErrorActionPreference = "Stop"
diff --git a/install.sh b/install.sh
index c182c1c..7efbac0 100644
--- a/install.sh
+++ b/install.sh
@@ -14,7 +14,7 @@ set -eu
 
 REPO="NDDev-OpenNetwork/codex-setup-system"
 BINARY="codex-setup-system"
-VERSION="${1:-0.0.3}"
+VERSION="${1:-0.0.4}"
 PREFIX="${CODEX_INSTALL_DIR:-$HOME/.local/bin}"
 
 case "$(uname -s)" in