diff --git a/.github/workflows/publish-middleware-python.yml b/.github/workflows/publish-middleware-python.yml
index 2fa6a257b..9d9f66db1 100644
--- a/.github/workflows/publish-middleware-python.yml
+++ b/.github/workflows/publish-middleware-python.yml
@@ -76,6 +76,17 @@ jobs:
         working-directory: packages/threadplane-middleware
         run: uv publish --dry-run dist/*
 
+      # PEP 740 attestations: `uv publish` uploads attestation files found
+      # next to the dists (on by default) but does not mint them — Astral's
+      # own publishing example pairs it with their attest-action for exactly
+      # this. Generated for the real release only; a dry run uploads nothing
+      # for them to accompany. SHA pin verified against tag v0.0.6.
+      - name: Generate PEP 740 attestations
+        if: ${{ inputs.dry_run == false }}
+        uses: astral-sh/attest-action@f589a42a7efb6fe400b4f400de60b4bc90390027 # v0.0.6
+        with:
+          paths: packages/threadplane-middleware/dist/*
+
       # uv publish, not the pypa action: the pinned action image's twine
       # rejected the Metadata-Version 2.5 that current `uv build` emits
       # ("InvalidDistribution: '2.5' is not a valid metadata version"), while
diff --git a/packages/threadplane-middleware/pyproject.toml b/packages/threadplane-middleware/pyproject.toml
index 642fcbbe7..ec3a1ba85 100644
--- a/packages/threadplane-middleware/pyproject.toml
+++ b/packages/threadplane-middleware/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "threadplane-middleware"
-version = "0.0.2"
+version = "0.0.3"
 description = "LangGraph middleware for binding client-declared tool stubs and routing client tool calls to END so the browser executes them."
 readme = "README.md"
 license = { text = "MIT" }
diff --git a/packages/threadplane-middleware/uv.lock b/packages/threadplane-middleware/uv.lock
index 94ba66c98..deef2479e 100644
--- a/packages/threadplane-middleware/uv.lock
+++ b/packages/threadplane-middleware/uv.lock
@@ -763,7 +763,7 @@ wheels = [
 
 [[package]]
 name = "threadplane-middleware"
-version = "0.0.2"
+version = "0.0.3"
 source = { editable = "." }
 dependencies = [
     { name = "langchain-core" },