@@ -6,7 +6,7 @@
 ## Resume contract
 
 - **HEAD**: `main` (`git log` = SSOT; tip `ac1b883c`). Per-commit = smoke; commit
-  **and** push (atomic Step 6). `build.zig.zon` `.zwasm` = tag pin `v2.0.0-alpha.3`.
+  **and** push (atomic Step 6). `build.zig.zon` `.zwasm` = stable tag pin `v2.0.0` (cljw 1.0.0).
 - **ACTIVE CAMPAIGN (2026-07-01, user-directed): 1.0.0-rc.1 release readiness
   (ADR-0167).** Full-scope A+B, fully autonomous. Drive the finite Track-A gate
   below + the parallel Track-B (ADR-0166 D-522…D-529) quality drain. The final
 
@@ -2,8 +2,8 @@
 
 > **SSOT for "what does the zwasm we embed offer, and what has cljw adopted".**
 > cljw embeds **zwasm v2** (F-001, unavoidable). The dep is a **tag pin** —
-> **v2.0.0-alpha.3** (`fc7ff0b3b`, see § Pin), pinned 2026-06-22 after the
-> relative-path JIT-adoption experiment settled. zwasm is itself under active
+> **v2.0.0** (`0853f3c1`, see § Pin), pinned 2026-07-01 — the stable release cljw
+> 1.0.0 ships on (bumped from alpha.3 for the D-501 no-max-table grow fix). zwasm is itself under active
 > co-development (`~/Documents/MyProducts/zwasm_from_scratch`, branch
 > `zwasm-from-scratch`) and its embedding API is *growing* — notably a **JIT-backed
 > engine** (the cljw north star, ROADMAP §9.0 gap area II × III). cljw has **adopted
@@ -42,13 +42,14 @@ a cljw-side shim.
 
 ## Pin
 
-- **TAG PIN — v2.0.0-alpha.3 (`fc7ff0b3b`), pinned 2026-06-22.** `build.zig.zon`
-  `.zwasm` = `.url = "git+https://github.com/clojurewasm/zwasm.git#fc7ff0b3b…"` +
-  `.hash = "zwasm-2.0.0-alpha.3-…"`, resolved from GitHub. This replaced the
+- **TAG PIN — STABLE v2.0.0 (`0853f3c1`), pinned 2026-07-01.** `build.zig.zon`
+  `.zwasm` = `.url = "git+…/zwasm.git#v2.0.0"` + `.hash = "zwasm-2.0.0-FT1Fvyv…"`,
+  resolved from GitHub. Bumped from v2.0.0-alpha.3 for the coherent cljw 1.0.0 release
+  (picks up the no-max-table `table.grow` JIT fix, zwasm D-501 tier-1). This replaced the
   2026-06-21 relative-path JIT-adoption experiment (`.path = "../zwasm_from_scratch"`,
   no-push) once zwasm cut the pinnable tag (3-host green) — so the no-push mode is
-  LIFTED and cljw pushes `main` again. The tag is annotated, tag-only (no GitHub
-  Release), so it is reproducible for others without disturbing the `Latest` pointer.
+  LIFTED and cljw pushes `main` again. v2.0.0 is a full stable GitHub Release
+  (published 2026-07-01), the coherent engine cljw 1.0.0 ships on.
 - `lazy` dependency: resolved only under `-Dwasm`. So a churning dep never
   breaks the day-to-day gate when the flag is off — it
   only gates what `cljw.wasm/*` can do.
@@ -69,6 +70,7 @@ a cljw-side shim.
 | **JIT-backed engine (`.auto`)**      | **ON (JIT-first + interp fallback)** — re-landed v2.0.0-alpha.3 (D-478); x86_64 LSRA miscompile D-489/D-494 fixed, 3-host green | YES (tag-pin)   | **ADOPTED — cljw default flipped `.interp`→`.auto` (D-488 discharged 2026-06-22); no-opts load rides JIT** | D-488        |
 | Components on JIT                    | interp-pinned (D-500, zwasm CM-API core); Win64 string-arg wrapper-thunk gap                                                     | YES (tag-pin)   | unaffected — `.auto` default leaves components on interp (zwasm-side pin)                                   | D-500, D-404 |
 | WIT component marshalling            | future                                                                                                                           | NO              | NOT adopted                                                                                                  | D-404        |
+| no-max table `table.grow` (JIT)      | tier-1 FIXED in v2.0.0 (D-501) — grows to a synth cap `max(min*2, 1024)`; unbounded no-max grow still interp-only               | YES (pin)       | unaffected (no `table.grow` / table decl in cljw host or FFI fixtures); available if a guest needs it        | D-501        |
 
 ## Forward plan — the JIT adoption unit (gap area II × III) — ACTIVE
 
@@ -141,3 +143,11 @@ was the `.auto`-default flip; this ledger tracks adoption status per capability.
   default executes a SIMD body only the JIT can run (`default-simd: 42`), proving the flip.
   Components stay interp-pinned on the zwasm side (D-500), so the component path is unaffected
   and the F-012 diff oracle (explicit `.interp`/`.jit`) is untouched. `to_cljw_09` CONSUMED.
+- **2026-07-01** — **PIN BUMP v2.0.0-alpha.3 → STABLE v2.0.0 (`0853f3c1`)** for the cljw
+  1.0.0 release. zwasm cut + published a stable `v2.0.0` GitHub Release (after one failed
+  release build + a tag re-cut); it picks up zwasm D-501 tier-1 (no-max table `table.grow`
+  under JIT grows to `max(min*2, 1024)`; PR #115) + a test-infra guest-stdout fd guard.
+  cljw is behaviorally unaffected (no `table.grow` usage); the full `--serial-e2e` gate
+  confirmed the embedding API (`Engine.init` / `runWasmCapturedFull` / `wasi.host.Host` /
+  `Module.InstantiateOpts`) is signature-stable. Resolves the D-543 "1.0.0 embeds a
+  pre-1.0 zwasm" incoherent-pin story — cljw 1.0.0 now ships on a coherent stable zwasm v2.0.0.
@@ -5,20 +5,13 @@ All notable changes to ClojureWasm are documented here. The format follows
 [SemVer](https://semver.org/). SemVer compatibility guarantees start at the
 first stable `1.0.0` tag; pre-1.0 `alpha` / `rc` tags may still change surfaces.
 
-<!--
-  STAGING NOTE (ADR-0167): the release-candidate entry below sits under
-  [Unreleased] because build.zig.zon .version is still an alpha until the
-  maintainer cuts the tag. Cutting `1.0.0-rc.1` = bump .version + rename this
-  heading to `## [1.0.0-rc.1] - <date>` + `git tag`. The autonomous loop never
-  tags; the version is the maintainer's to own.
--->
+## [1.0.0] - 2026-07-01
 
-## [Unreleased]
-
-The first **release candidate** for `1.0.0`. ClojureWasm is a JVM-free Clojure
-runtime written in Zig, feature-complete for everyday Clojure with a
-WebAssembly FFI as its headline capability. Earlier pre-releases were tagged
-`1.0.0-alpha.*`.
+The first **stable** release. ClojureWasm is a JVM-free Clojure runtime written
+in Zig, feature-complete for everyday Clojure with a WebAssembly FFI as its
+headline capability. The WebAssembly FFI runs on the embedded **zwasm v2.0.0**
+engine. Earlier pre-releases were tagged `1.0.0-alpha.*`. SemVer compatibility
+guarantees start here.
 
 ### Added
 
@@ -32,7 +25,7 @@ WebAssembly FFI as its headline capability. Earlier pre-releases were tagged
 - **WebAssembly FFI** — `(wasm/load "mod.wasm")` then `(wasm/call m "fn" …)`:
   load a sandboxed module compiled from any language (Rust, Go, Zig, C) and
   call it like an ordinary function. The FFI is **JIT-compiled by default** via
-  the embedded zwasm engine, so a hot loop inside a module runs as native code.
+  the embedded **zwasm v2.0.0** engine, so a hot loop inside a module runs as native code.
 - **WebAssembly components as namespaces** — `(:require ["comp.wasm" :as c])`
   pulls a WIT-typed component in like a library; its exports become ordinary
   Vars, with arguments and results as plain Clojure data.
 
@@ -17,8 +17,8 @@
 </p>
 
 > [!NOTE]
-> ClojureWasm is **not yet stable** and is built by a very small team with
-> limited resources. To keep that focus, **Issues and Pull Requests are not
+> ClojureWasm has reached its first stable release (**1.0.0**), but it is built by
+> a very small team with limited resources. To keep that focus, **Issues and Pull Requests are not
 > being accepted** right now. You are very welcome to read along, try it, and
 > say hello in [GitHub Discussions](https://github.com/clojurewasm/ClojureWasm/discussions).
 
 
@@ -1,6 +1,6 @@
 .{
     .name = .cljw,
-    .version = "1.0.0-alpha.1",
+    .version = "1.0.0",
     .fingerprint = 0x1869d207073beffa,
     .minimum_zig_version = "0.16.0",
     .dependencies = .{
@@ -10,16 +10,16 @@
         },
         // zwasm v2 embedding API (F-001 / D-037). `lazy` so the DEFAULT build +
         // gate never resolve it — only `-Dwasm` (b.lazyDependency) does.
-        // PINNED to tag **v2.0.0-alpha.3** (zwasm@fc7ff0b3b, 2026-06-22, to_cljw_09): the
-        // JIT-adoption co-dev experiment settled — zwasm cut a pinnable tag (3-host green:
-        // Mac aarch64 + ubuntu x86_64 + Win64), so cljw exits the relative-path NO-PUSH
-        // mode and pins the tag. `.auto`=JIT-default (D-489/D-494 fixed) + funcref C-API
-        // (D-498) landed; cljw uses explicit `.interp`(D-488)/`.jit`, so no behaviour
-        // change. (Prior relative-path form: `.path = "../zwasm_from_scratch"`, see git
-        // history.) lazy + flag-guard means a churning dep cannot break the default gate.
+        // PINNED to STABLE tag **v2.0.0** (zwasm@0853f3c1, 2026-07-01): the coherent
+        // release cljw 1.0.0 ships on. Bumped from v2.0.0-alpha.3 to pick up the
+        // no-max-table `table.grow` JIT fix (zwasm D-501 tier-1, PR #115: grows to a
+        // `max(min*2, 1024)` cap). `.auto`=JIT-default; cljw uses explicit `.interp`/`.jit`
+        // and is behaviorally unaffected (no `table.grow` usage). (Prior relative-path
+        // form: `.path = "../zwasm_from_scratch"`, see git history.) lazy + flag-guard
+        // means a churning dep cannot break the default gate.
         .zwasm = .{
-            .url = "git+https://github.com/clojurewasm/zwasm.git#fc7ff0b3b6404e077b3c186605cf49a15e96cc0a",
-            .hash = "zwasm-2.0.0-alpha.3-FT1FvyFxiwCcp4CVyldwaUXBdxEhxM0L_GvghvGslqt8",
+            .url = "git+https://github.com/clojurewasm/zwasm.git#v2.0.0",
+            .hash = "zwasm-2.0.0-FT1FvyvVigD7I5-Bcc0cT3L_Z2BjgVTl6sjuGLdOHOrc",
             .lazy = true,
         },
     },
 
@@ -13,8 +13,8 @@ language lineage separately.
 ## Build / runtime dependencies (fetched, pinned in build.zig.zon)
 
 - **zwasm** — the embedded WebAssembly engine that powers the Wasm FFI.
-  Apache-2.0. Pinned to commit `fc7ff0b3b6404e077b3c186605cf49a15e96cc0a`
-  (`v2.0.0-alpha.3`). Resolved only for the Wasm-enabled build (`-Dwasm`); the
+  Apache-2.0. Pinned to the stable tag `v2.0.0` (commit `0853f3c1`). Resolved
+  only for the Wasm-enabled build (`-Dwasm`); the
   default build does not fetch it.
   Source: <https://github.com/clojurewasm/zwasm>.
 - **zlinter** — a development-time Zig linter used by `zig build lint`. MIT.