diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 466df71..a915e8c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.1.0"
+  ".": "0.1.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 15a61af..00e3293 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,4 +5,125 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.1](https://github.com/inferadb/control/compare/v0.1.0...v0.1.1) (2026-04-07)
+
+
+### Features
+
+* adapt to upstream changes ([b4a3bb5](https://github.com/inferadb/control/commit/b4a3bb5de611fcc950734a05ac69c02a219747df))
+* adapt to upstream changes ([ce39028](https://github.com/inferadb/control/commit/ce3902826cacbcbdf026a1c7d65a354a1c4701b6))
+* adapt to upstream changes ([6d8a9c7](https://github.com/inferadb/control/commit/6d8a9c7553f15ebbc9807670f79bbb6fb5edf78c))
+* add Dockerfile ([481d5e7](https://github.com/inferadb/control/commit/481d5e77ec40271d4c732b39daea7816a60c68de))
+* add frontend_base_url config; revoke sessions on password reset ([ae8fc43](https://github.com/inferadb/control/commit/ae8fc4371826e8f833ab7206dd3f4f571c61b116))
+* add helm charts ([afe764f](https://github.com/inferadb/control/commit/afe764f495d6c93d231a2a815c92036cd0607919))
+* add ledger-back signing key support ([3338e45](https://github.com/inferadb/control/commit/3338e458d15924adfa73683304bbf7ddb3ed61c6))
+* add manager role for token generator ([365b4b1](https://github.com/inferadb/control/commit/365b4b10c1be953adc4ca223bafc4993f139d009))
+* add shortcut API endpoint for leaving organizations ([6a55154](https://github.com/inferadb/control/commit/6a5515481556b0f10fac20a50f52f146bad7235d))
+* add startup config output ([dc23737](https://github.com/inferadb/control/commit/dc23737eae9a614e4eb5df68a4824fd7e3a5cea2))
+* AppState <-> LedgerClient ([831cdcb](https://github.com/inferadb/control/commit/831cdcbad5158199531c9b843644f8f6fc2d9f47))
+* audit logging expansion ([3b3c6da](https://github.com/inferadb/control/commit/3b3c6da36b5de3cc86da6e6cac86574c372c878f))
+* batch write optimizations ([1ff16df](https://github.com/inferadb/control/commit/1ff16df3601343420dcbc8573608961b3565ee5b))
+* blinding key support ([f66763c](https://github.com/inferadb/control/commit/f66763cca0355dd62dadefe129bee4b3955a0bac))
+* certificate lifecycle transaction boundaries ([90e9982](https://github.com/inferadb/control/commit/90e99829cd778c1dd4d2e21057740364ae787465))
+* client assertion and JWKS validation improvements ([30d505b](https://github.com/inferadb/control/commit/30d505b12c927a6e6b6edc397f5ae9d74613104d))
+* client support ([15d9260](https://github.com/inferadb/control/commit/15d9260243b8ddb572700d61b5b90e6c7b74d095))
+* config improvements ([a59132d](https://github.com/inferadb/control/commit/a59132d25fcb276ffe3bd89e4a43c7af3780171d))
+* config improvements ([702ee1b](https://github.com/inferadb/control/commit/702ee1bc9558e1a8bc5b9f9a0332286fc0f52e6f))
+* config syntax improvements ([cec64df](https://github.com/inferadb/control/commit/cec64df8629bcbe3092960f58d59eda932978b8e))
+* crate prefixing ([a2dadd7](https://github.com/inferadb/control/commit/a2dadd71d2ad3c30fb0d69bab3815efa586d79ad))
+* dynamically adapt to configuration changes ([c6025cf](https://github.com/inferadb/control/commit/c6025cf43ea968a047e7aed56c1ba9802decef3d))
+* email code flow ([095da5c](https://github.com/inferadb/control/commit/095da5ccde39beb3d88f41920f0ed3c42ae2a100))
+* email template improvements ([9687ce2](https://github.com/inferadb/control/commit/9687ce26f676ffb0fb979a31ac6dd2be42be0bf6))
+* email verification and password reset ([80c83b2](https://github.com/inferadb/control/commit/80c83b29063692ed3e28a2a8bd5b1a2732b9c467))
+* expand foundationdb storage layer ([dffc15c](https://github.com/inferadb/control/commit/dffc15cbc5687b1a3257d8344f0eaf9fb09a22c7))
+* expand foundationdb storage layer ([b8e9d25](https://github.com/inferadb/control/commit/b8e9d2529e91289f866558fe7e5a691de4a4411b))
+* fdb coordination, metrics, optimization layer ([a54bfd1](https://github.com/inferadb/control/commit/a54bfd1ecbb747692fe16204d3c74cd373a8cc94))
+* fix JWKS endpoint cache ([3d20c76](https://github.com/inferadb/control/commit/3d20c7651ee061e1f176eda7318c3e464e9dd8ef))
+* implement moka LRU caching ([1c6e36c](https://github.com/inferadb/control/commit/1c6e36c85f866a0820a778918180cec73b4548d8))
+* implement zeroize for crypto keys ([2c074e0](https://github.com/inferadb/control/commit/2c074e05bf97131757ffc73489706d28ba1b5594))
+* impove log output formatting ([35a5c61](https://github.com/inferadb/control/commit/35a5c61eac1d5c5939594892dd017fc2ea51b2d1))
+* improve startup config validation ([f79d9ad](https://github.com/inferadb/control/commit/f79d9ad888d870c703676c920603a322faecd121))
+* improve startup config validation ([d0cfa53](https://github.com/inferadb/control/commit/d0cfa5337e57290d3afd4af2156edec9a9434f47))
+* improvements to response payloads ([3d17412](https://github.com/inferadb/control/commit/3d17412af635073e05cf4360a3495a88533e60a1))
+* improvements to start up logging ([294279f](https://github.com/inferadb/control/commit/294279f3dfa7269b2158bc9e521676508ea88377))
+* initial commit ([e7197e4](https://github.com/inferadb/control/commit/e7197e411a2d9df856ea1fd255d358ff6d912999))
+* jwt aud validation ([184c5f2](https://github.com/inferadb/control/commit/184c5f2bb72d4aafd96c22a835cff451b2e57670))
+* jwt auth middleware ([2fb869c](https://github.com/inferadb/control/commit/2fb869c2c393afa5d33458d4af8ac536fe354ffa))
+* k8s healthz endpoints ([bfd9e3a](https://github.com/inferadb/control/commit/bfd9e3a7b7a30a037724624d9dd920be22eb186b))
+* kubernetes discovery ([ad3bbe7](https://github.com/inferadb/control/commit/ad3bbe77024fcc7af9e5d7f0f489b0a6a9462552))
+* leader election → ledger gc ([167186d](https://github.com/inferadb/control/commit/167186d2614c6c3b173bd5e761803ff15f8cd6da))
+* ledger migration ([cf5afd9](https://github.com/inferadb/control/commit/cf5afd91d238583602c79d6a4b8db3470e81b8ee))
+* mailpit support for tests ([da43e3e](https://github.com/inferadb/control/commit/da43e3e9aa088649aee9e0542b561e03c30b68bf))
+* make fdb optional, feature flag ([e62b431](https://github.com/inferadb/control/commit/e62b431491642d594d97b3b22004dcf344661c32))
+* new server-to-server isolation layer ([11f56c2](https://github.com/inferadb/control/commit/11f56c29373f161215336de7efbac3b3aac6fa9c))
+* observability ([ba2644e](https://github.com/inferadb/control/commit/ba2644e8b32be0f69baecd42a214e1107dfe4195))
+* openapi updates ([993e25c](https://github.com/inferadb/control/commit/993e25c7278b90e04d50509b4233843d66a56b38))
+* optimization pass ([64b23b5](https://github.com/inferadb/control/commit/64b23b5d1633469ef3fc050bbbb5b6894b6113e5))
+* optimization pass ([8fb694a](https://github.com/inferadb/control/commit/8fb694a8fdc7fae9c420567e32c1ea915c75512b))
+* org suspension/resume, JWKS improvements ([7910699](https://github.com/inferadb/control/commit/79106996227f26b0848fd92868077a916233a548))
+* organization support ([b8d0028](https://github.com/inferadb/control/commit/b8d0028c3e20f9ccd74b6cbc6a09dababa80f04c))
+* organization support ([29f49ed](https://github.com/inferadb/control/commit/29f49ed4ac48178f11f8c0a6ab7f2d0f1674fdab))
+* passkeys, load testing ([8a6fa15](https://github.com/inferadb/control/commit/8a6fa15d3f5f040c812c9bf8a078128a82ea80ec))
+* per-vault schemas, revisions, management ([077bdf7](https://github.com/inferadb/control/commit/077bdf7d753948b93f6a1645cfebd02c3af72572))
+* production readiness improvements ([9b24fb8](https://github.com/inferadb/control/commit/9b24fb81036266c2e9dc08cd24205bef593a20d4))
+* remove obsolete internal routes ([0b8fe55](https://github.com/inferadb/control/commit/0b8fe55b5a4aad4164fef01620b37d36399c99e9))
+* remove obsolete tls_enabled config flag ([0c710ff](https://github.com/inferadb/control/commit/0c710ff299218c043a540f47f18d671cc2a636fc))
+* replace file-based config with cli arguments ([1ceb25a](https://github.com/inferadb/control/commit/1ceb25a63f316c4db230c3f591c167055d117b0d))
+* s2s endpoint for org state ([5964c5f](https://github.com/inferadb/control/commit/5964c5fa81d15983f572189079de13e011421cb9))
+* s2s webhook expansion ([2619e6b](https://github.com/inferadb/control/commit/2619e6b52a86827c456bbcd657806f3eb3df4a5c))
+* server_identity, server_verification ([9992f06](https://github.com/inferadb/control/commit/9992f06761d8fa7b8f95351e735c70a54368ced5))
+* service discovery improvements ([a2bc8ef](https://github.com/inferadb/control/commit/a2bc8efe26bef550437aa4ae9ba2b3a3b06f6c83))
+* service wrappers for upstream sdk changes ([b5d5251](https://github.com/inferadb/control/commit/b5d5251de6fdfe07bc6927aa9609a15d12629629))
+* session endpoints ([19b774c](https://github.com/inferadb/control/commit/19b774cae76fcc440c4ff092bcfa4fae183e8a4a))
+* storage migration ([d906f35](https://github.com/inferadb/control/commit/d906f35760b471722ca1c0635ca7ff039b47ec75))
+* tailscale cross-cluster discovery ([e77a6ae](https://github.com/inferadb/control/commit/e77a6ae0f56e9bfdd06c30049321ae52f9269cc7))
+* team management ([75374e5](https://github.com/inferadb/control/commit/75374e5a6783f6d4980f251c1fb7ff100133dcc3))
+* token management ([3f95e20](https://github.com/inferadb/control/commit/3f95e20d2ecd8d41aff5ba75947c5093d86c89f0))
+* totp, passkey, recovery codes ([8ceacd9](https://github.com/inferadb/control/commit/8ceacd9276ccc42389bdc79b371420051cd66c2d))
+* unify ip address extraction handling ([e7d39b6](https://github.com/inferadb/control/commit/e7d39b67dbb5e9892e50f292b815dc5a1da8180d))
+* update startup logging ([03e3b50](https://github.com/inferadb/control/commit/03e3b507cad19a59fd3dd8240ba2112e6d103dde))
+* vaukt support ([20dab6a](https://github.com/inferadb/control/commit/20dab6ac2e1aa406f36d7fba7569b6ebb85f9963))
+* vault migration ([39ea073](https://github.com/inferadb/control/commit/39ea0738fef111305e639352894139c44fc6ed5a))
+* webhook discovery ([7dde835](https://github.com/inferadb/control/commit/7dde83598e79eca13dde78723d9547317cdf8ec6))
+
+
+### Bug Fixes
+
+* control jwk struct needs vault_id and org_id ([9bd62ad](https://github.com/inferadb/control/commit/9bd62adbc80e62b9283951fd1d80301df2d91985))
+* email mime encoding ([de38497](https://github.com/inferadb/control/commit/de3849759ec1796304bd81b2c4d7f1e8c5a45c11))
+* integration crate prefix typo ([add5a2f](https://github.com/inferadb/control/commit/add5a2fe701e20f216c01fe70f5b04554258a604))
+* Makefile crate prefix ([ba0585f](https://github.com/inferadb/control/commit/ba0585f20c221c0e4dda1240a53117924d1673e6))
+* malformed Mermaid graph ([ca16eb7](https://github.com/inferadb/control/commit/ca16eb780a0781cd06bd56e50f5d5940e29851fc))
+* organization names are not unique ([e3b41b1](https://github.com/inferadb/control/commit/e3b41b14d321fc7c50153845ff75bd41057f4bfd))
+* otel improvements ([47073e0](https://github.com/inferadb/control/commit/47073e0957808414b7ff95b69ab5f6c30f698a25))
+* password reset email enumeration ([0b5a7db](https://github.com/inferadb/control/commit/0b5a7db4453b24417822ed757d63a8b681fc99a1))
+* restore name index ([72ff424](https://github.com/inferadb/control/commit/72ff42443d3cd8771d62af2e0b70fb5cf3f8a275))
+* upload cargo lockfile ([d2405e7](https://github.com/inferadb/control/commit/d2405e72275758b4cddd9a90a0a6682447e7e6e7))
+* use k8s service name for integration tests ([bd10c56](https://github.com/inferadb/control/commit/bd10c563a29e25bd219242d03a60932a9b61142e))
+* user names are not unique ([68b8e17](https://github.com/inferadb/control/commit/68b8e1725bddfe6736de3203b9d4c14f63838c7e))
+* user names are not unique ([17cd6b5](https://github.com/inferadb/control/commit/17cd6b506f90ccfbc291701cc7ecfb7802d3f298))
+* vault_user_grant.delete → vault_team_grant.delete ([4c72547](https://github.com/inferadb/control/commit/4c725470724e2abfd6fd152e9f947fc74379ff6d))
+
+
+### Improvements
+
+* account registration transaction boundaries ([812574f](https://github.com/inferadb/control/commit/812574ff128e96e4bcac9bbbc22d088b788a8e5b))
+* add CLAUDE ([2a12a20](https://github.com/inferadb/control/commit/2a12a202c57fab9d84c2cbcc17f7b5931522ea03))
+* add github templates, labeler, stale ([948d60a](https://github.com/inferadb/control/commit/948d60a57cc3570d5349a60095324958db152e29))
+* add Makefile ([66a26fd](https://github.com/inferadb/control/commit/66a26fdfa54da393c32e336d54887ad9d668b6c8))
+* **api:** migrate dev-dependency from inferadb-engine-auth to inferadb-common-authn ([1b1508b](https://github.com/inferadb/control/commit/1b1508b2d087cb12e2cb4970bc45ff2b82911cf0))
+* env var name updates ([aee898f](https://github.com/inferadb/control/commit/aee898fb19485727fb0d42b54e1688944cd9cd8f))
+* improve dev workflow ([c86c2f4](https://github.com/inferadb/control/commit/c86c2f469f85c30387b6f572e89dbc384b725379))
+* improve dev workflow ([89a2f9a](https://github.com/inferadb/control/commit/89a2f9a5eac60e1da62aad7bc510afd594d80569))
+* min rust runtime version consistency in manifests ([99c18bc](https://github.com/inferadb/control/commit/99c18bcee72e5b967dbe1814a49259b942db7e41))
+* serena memories ([a391271](https://github.com/inferadb/control/commit/a3912712d0d80c98e577debd4ba156b16ed78bcb))
+* tooling updates ([0d77156](https://github.com/inferadb/control/commit/0d77156c4f8106f486f8e0bd205db8df7032be4d))
+* tooling updates ([0201d97](https://github.com/inferadb/control/commit/0201d9702b07ec1e72a8cc5e442e8c2478f0682d))
+* update agent context files ([7d74ad6](https://github.com/inferadb/control/commit/7d74ad6e1e581f8bd1ac0842918a7a3de1e5d1c4))
+* update dev workflow ([83af583](https://github.com/inferadb/control/commit/83af5838f7c61335afbf4fddd2d7f47afccf0d5b))
+* update dev workflow ([daa08a3](https://github.com/inferadb/control/commit/daa08a3692ce01e2044991cf6c0324663f9230e4))
+* update dev workflow ([0848585](https://github.com/inferadb/control/commit/0848585e4a77cf12b4c16d48c3744f42b9683217))
+* update git submodule ([428b216](https://github.com/inferadb/control/commit/428b2167d7beb3372f7ffed6d8c4cc66f99b18d0))
+* update k8s management service identity ([daf0ad9](https://github.com/inferadb/control/commit/daf0ad9890dfaebba798f26a06565cd198eb4a92))
+
 ## [Unreleased]
diff --git a/Cargo.toml b/Cargo.toml
index 8695d72..0ab83eb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -19,7 +19,7 @@ license = "MIT OR Apache-2.0"
 publish = false
 repository = "https://github.com/inferadb/inferadb"
 rust-version = "1.92"
-version = "0.1.0"
+version = "0.1.1"
 
 [workspace.dependencies]
 # Core async runtime