diff --git a/CHANGELOG.md b/CHANGELOG.md
index d75d526..0ea1a5f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,14 +17,22 @@ is only released once its **exit criterion** is met, not when its code lands.
 | v0.10.0 | — | InfiniBand fabrics and NVLink, doctor, node add, engines installed by the nodes | released |
 | v0.11.0 | — | High availability from setup, the setup and console screens, usage sums and per-tenant alerts | released |
 | v0.12.0 | — | The cluster's settings in the store, in force when changed; the firewall switch; wipe | released |
+| v0.13.0 | — | The whole system stopped and started from one command; Qwen3Guard judges, on a GPU and CPUs together | released |
 | v1.0.0 | 5 | Tenancy, prefix affinity, benchmarking | planned |
 
 Until v1.0.0 the minor version is the breaking one: configuration formats and Go
 APIs change between minors without a deprecation period.
 
-## Unreleased
+## v0.13.0 — 2026-10-08
 
-What was left of the field report from v0.10.6.
+The whole system stopped, started and restarted from one command, a
+guardrails judge that no longer refuses ordinary coding requests, and the
+rest of the field report from v0.10.6.
+
+**Upgrading.** A cluster keeps the judge its policies name: one installed
+before this release goes on asking Llama Guard 3 1B until `llmgw ctl guard
+judge use qwen3guard-0.6b`, which the leader then fetches and serves by
+itself, and which replaces the policies' Llama Guard category codes.
 
 ### Added