diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1a42daa..6880793 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,8 @@ jobs:
             echo "FATAL: manifest.json version must be semver x.y.z, got '$VERSION'"
             exit 1
           fi
-          LATEST_TAG=$(git describe --tags --abbrev=0 2>/dev/null | sed 's/^v//' || echo "0.0.0")
+          LATEST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0")
+          LATEST_TAG=${LATEST_TAG#v}
           echo "manifest=$VERSION latest_tag=$LATEST_TAG"
 
           if [ "$VERSION" != "$LATEST_TAG" ]; then
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 33d1115..75db5a6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## 0.0.1
+## 1.0.0
 
 Initial public release of the Codex adapter for devkit.
 
@@ -37,3 +37,7 @@ Initial public release of the Codex adapter for devkit.
   write access; without it, the bump-commit push step will fail.
 - Release notes generation now tries both `## ${VERSION}` and `## v${VERSION}`
   headers in `CHANGELOG.md` (matching core devkit).
+- Release workflow no longer corrupts the version when no git tags exist.
+  Previously `git describe ... | sed ... || echo 0.0.0` ignored `git describe`'s
+  failure because the `||` saw `sed`'s success on empty input, leaving
+  `LATEST_TAG` empty and producing `version=..1` on the first release.
diff --git a/manifest.json b/manifest.json
index 5e0b4a2..8fb578e 100644
--- a/manifest.json
+++ b/manifest.json
@@ -1,7 +1,7 @@
 {
   "name": "devkit-codex",
   "description": "Codex adapter for devkit MCP workflows and lifecycle hooks",
-  "version": "..1",
+  "version": "1.0.0",
   "devkit_min": "2.1.30",
   "license": "MIT",
   "repository": "https://github.com/5uck1ess/devkit-codex",