diff --git a/CHANGELOG.md b/CHANGELOG.md
index b86be015..49371b96 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.36.117](https://github.com/azerozero/grob/compare/v0.36.116...v0.36.117) - 2026-09-26
+
+### Fixed
+
+- *(security)* enforce stream guards and align runtime contracts ([#617](https://github.com/azerozero/grob/pull/617))
+
 ## [0.36.116](https://github.com/azerozero/grob/compare/v0.36.115...v0.36.116) - 2026-09-26
 
 ### Fixed
diff --git a/Cargo.lock b/Cargo.lock
index fca97083..74ef03a7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2074,7 +2074,7 @@ dependencies = [
 
 [[package]]
 name = "grob"
-version = "0.36.116"
+version = "0.36.117"
 dependencies = [
  "aes-gcm 0.11.1",
  "age",
diff --git a/Cargo.toml b/Cargo.toml
index 9c191746..e0cebc3b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "grob"
-version = "0.36.116"
+version = "0.36.117"
 edition = "2021"
 license = "Apache-2.0"
 description = "High-performance LLM routing proxy — routes to Anthropic, OpenAI, Gemini, DeepSeek, Ollama & more with streaming, tool calling, and multi-provider fallback"