diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2fd61065..7e3ea93c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,32 @@ _Nothing yet._
 
 ---
 
+## [0.11.0] — 20.jun.2026
+
+### Versioning
+
+- Unify the Clawdie release version across **clawdie-iso and colibri** at `0.11.0`.
+  This supersedes the 0.10.0 decoupling for these two components, which always
+  ship together. zot and clawdie-ai keep their own versions, recorded as
+  provenance in `build-manifest.json`.
+
+### Changed
+
+- Live operator-session scripts hardened: identity wallpaper off host-global
+  `/tmp` with multi-monitor apply; Join Hive captures the generator's output
+  path; vault fetch work dir moved to a `0700` runtime dir; scratch/tmp policy
+  documented in `AGENTS.md`.
+- Added first-party poudriere build-server scripts (`scripts/poudriere/`) and
+  retargeted `docs/POUDRIERE-BUILD-SERVER.md` to the `mother-build` host and
+  `pkg.clawdie.si`.
+
+### Removed
+
+- Duplicate `sysutils/colibri` FreeBSD port; the colibri repo is the single
+  source of truth. `build.sh`'s release gate fails if it reappears here.
+
+---
+
 ## [0.10.0] — 2026-06-15
 
 **Codename:** Operator Image
diff --git a/build.cfg b/build.cfg
index 972aa727..82c20015 100644
--- a/build.cfg
+++ b/build.cfg
@@ -9,11 +9,11 @@ FREEBSD_ISO_BASE_URL="https://download.freebsd.org/releases/${FREEBSD_ARCH}/${FR
 FREEBSD_MEMSTICK_URL="${FREEBSD_ISO_BASE_URL}/FreeBSD-${FREEBSD_VERSION}-${FREEBSD_ARCH}-memstick.img"
 FREEBSD_MEMSTICK_SHA256_URL="${FREEBSD_ISO_BASE_URL}/CHECKSUM.SHA256-FreeBSD-${FREEBSD_VERSION}-${FREEBSD_ARCH}"
 
-# ISO version metadata.
-# The ISO carries its own product version — it does NOT borrow a component's
-# number. Component versions (zot, colibri, clawdie-ai, clawdie-iso) are recorded
-# as provenance in build-manifest.json. Bump this for each milestone image.
-ISO_VERSION="${ISO_VERSION:-0.10.0}"
+# Clawdie release version.
+# clawdie-iso and colibri share this unified version (keep colibri's Cargo.toml
+# in sync). zot and clawdie-ai keep their own versions, recorded as provenance in
+# build-manifest.json. Bump this for each release.
+ISO_VERSION="${ISO_VERSION:-0.11.0}"
 BUILD_CHANNEL="${BUILD_CHANNEL:-dev}"  # dev | release
 
 # Output image