diff --git a/CHANGELOG.md b/CHANGELOG.md
index a1f9f58..187f6f0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## [0.3.0](https://github.com/SecurityRonin/shellitem/compare/shellitem-v0.2.3...shellitem-v0.3.0) - 2026-09-20
+
+### Added
+
+- *(forensic)* split into reader + analyzer behind a shellitem facade
+
 ## [0.2.3](https://github.com/SecurityRonin/shellitem/compare/shellitem-v0.2.2...shellitem-v0.2.3) - 2026-08-20
 
 ### Fixed
diff --git a/Cargo.lock b/Cargo.lock
index be7dfef..359e43a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -29,21 +29,21 @@ dependencies = [
 
 [[package]]
 name = "shellitem"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "shellitem-core",
 ]
 
 [[package]]
 name = "shellitem-core"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "forensicnomicon",
 ]
 
 [[package]]
 name = "shellitem-forensic"
-version = "0.2.3"
+version = "0.3.0"
 dependencies = [
  "forensicnomicon",
  "shellitem-core",
diff --git a/Cargo.toml b/Cargo.toml
index 0a596f9..b817861 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -5,7 +5,7 @@ resolver = "2"
 # Single source of truth for fields shared by the reader (`shellitem-core`),
 # the analyzer (`shellitem-forensic`) and this backward-compatible facade.
 [workspace.package]
-version = "0.2.3"
+version = "0.3.0"
 edition = "2021"
 rust-version = "1.75"
 license = "Apache-2.0"
@@ -15,7 +15,7 @@ homepage = "https://github.com/SecurityRonin/shellitem"
 readme = "README.md"
 
 [workspace.dependencies]
-shellitem-core = { version = "0.2.3", path = "core" }
+shellitem-core = { version = "0.3.0", path = "core" }
 forensicnomicon = "1"
 
 # ── Paranoid Gatekeeper ──────────────────────────────────────────────────────
diff --git a/core/CHANGELOG.md b/core/CHANGELOG.md
new file mode 100644
index 0000000..03543f0
--- /dev/null
+++ b/core/CHANGELOG.md
@@ -0,0 +1,19 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.3.0](https://github.com/SecurityRonin/shellitem/compare/shellitem-core-v0.2.3...shellitem-core-v0.3.0) - 2026-09-20
+
+### Added
+
+- *(forensic)* split into reader + analyzer behind a shellitem facade
+
+### Documentation
+
+- replace the unearned "fuzzed" claim with measured exec counts
+- README, mkdocs site, index, CHANGELOG + governance (publish-ready)
diff --git a/forensic/CHANGELOG.md b/forensic/CHANGELOG.md
new file mode 100644
index 0000000..776e34a
--- /dev/null
+++ b/forensic/CHANGELOG.md
@@ -0,0 +1,19 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.3.0](https://github.com/SecurityRonin/shellitem/compare/shellitem-forensic-v0.2.3...shellitem-forensic-v0.3.0) - 2026-09-20
+
+### Added
+
+- *(forensic)* split into reader + analyzer behind a shellitem facade
+
+### Documentation
+
+- replace the unearned "fuzzed" claim with measured exec counts
+- README, mkdocs site, index, CHANGELOG + governance (publish-ready)