diff --git a/.gitea/workflows/verify.yml b/.gitea/workflows/verify.yml
index aff69fa..d766d17 100644
--- a/.gitea/workflows/verify.yml
+++ b/.gitea/workflows/verify.yml
@@ -2,7 +2,7 @@
 name: verify
 on:
   push:
-    branches: [main, 'codex/**']
+    branches: [main, 'codex/**', 'gamertan/**']
   workflow_dispatch:
 permissions:
   contents: read
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 72b0dea..b463093 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,8 @@
 
 ## Unreleased
 
+## v0.1.0-preview.5 — 2026-08-21
+
 - Add storage-neutral passkey registration, discoverable login, and
   operation-bound fresh assertions without adding self-registration, password
   fallback, TOTP, email recovery, or application-owned routes.
@@ -17,6 +19,10 @@
 - Pin WebAuthn protocol verification to `github.com/go-webauthn/webauthn`
   `v0.17.1` and record its source identity, module checksums, licence, and
   transitive security boundary.
+- Add self-service passkey enrollment and removal primitives with fresh
+  assertion, session revocation, and last-credential protection.
+- Keep Previews 1–4 immutable; applications select Preview 5 explicitly when
+  adopting the passkey boundary.
 
 ## v0.1.0-preview.4 — 2026-08-18
 
diff --git a/README.md b/README.md
index 6d0a9ca..d806114 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 # Gamertan Web Foundations
 
-> Status: `v0.1.0-preview.4` public preview. APIs may change before a stable
+> Status: `v0.1.0-preview.5` public preview. APIs may change before a stable
 > release; Linux is the maintained release platform.
 
 Small, composable Go packages for the unglamorous boundaries of a careful web
@@ -24,14 +24,14 @@ Pin the preview in an application module, then import only the packages that
 application needs:
 
 ```bash
-go get gamertan.com/web@v0.1.0-preview.4
+go get gamertan.com/web@v0.1.0-preview.5
 go mod verify
 ```
 
 An application may also name the first package it intends to adopt:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 ```
 
 The version belongs to the `gamertan.com/web` module. Go compiles and links
diff --git a/docs/GETTING_STARTED.md b/docs/GETTING_STARTED.md
index f0d6fa3..fec9b81 100644
--- a/docs/GETTING_STARTED.md
+++ b/docs/GETTING_STARTED.md
@@ -25,7 +25,7 @@ The packages are ordinary Go imports. Pin the current preview and verify its
 module checksum:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 go mod verify
 ```
 
diff --git a/docs/MODULES.md b/docs/MODULES.md
index c03799e..19b98db 100644
--- a/docs/MODULES.md
+++ b/docs/MODULES.md
@@ -18,7 +18,7 @@ import "gamertan.com/web/requestmeta"
 and request the containing module at an exact version:
 
 ```bash
-go get gamertan.com/web/requestmeta@v0.1.0-preview.4
+go get gamertan.com/web/requestmeta@v0.1.0-preview.5
 ```
 
 Only imported packages are compiled and linked. The packages nevertheless