diff --git a/SECURITY.md b/SECURITY.md
index 7daaa5d..5376577 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -3,10 +3,8 @@
 ## Reporting
 
 Do not open a public issue for a suspected vulnerability or accidental private
-data disclosure. Use GitHub private vulnerability reporting when it is enabled
-for this repository. Until then, contact the repository owner privately through
-their GitHub profile and include only the minimum information needed to arrange
-a secure report.
+data disclosure. Use GitHub private vulnerability reporting for this repository
+and include only the minimum information needed for a secure report.
 
 Ordinary validation bugs that do not expose private data or create a security
 risk may be reported through GitHub Issues.
diff --git a/STATUS.md b/STATUS.md
index 2a0ed1d..22072c8 100644
--- a/STATUS.md
+++ b/STATUS.md
@@ -8,10 +8,10 @@ leave material plans only in chat history.
 
 ## Current state
 
-- Repository visibility: private; the reviewed public developer-preview
-  candidate was merged into `main` through PR #1. The final privacy,
-  clean-clone, package, and documentation audit passed on 2026-07-22.
-  Visibility remains unchanged pending explicit publication authorization.
+- Repository visibility: public since 2026-07-22. The reviewed developer-preview
+  candidate was merged through PR #1, and the final privacy, clean-clone,
+  package, and documentation audit passed before publication. GitHub private
+  vulnerability reporting and protected-branch CI are enabled.
 - Package and CLI: `geometry-validated-layout` version `0.1.0`.
 - Python import: `geometry_validated_layout`.
 - Test baseline: 12 tests, with CI coverage for Python 3.10 through 3.14.
@@ -58,9 +58,7 @@ leave material plans only in chat history.
 
 ## Deferred publication work
 
-- Change visibility only after explicit repository-owner authorization.
-- After the visibility change, enable the public-repository security settings
-  and create the tagged GitHub prerelease described in
+- Create the tagged `v0.1.0` GitHub prerelease described in
   `docs/RELEASE_READINESS.md`.
 - Optional later PyPI publication; the package name was unclaimed when checked
   on 2026-07-22.
diff --git a/docs/RELEASE_READINESS.md b/docs/RELEASE_READINESS.md
index dc0bd32..48a4a84 100644
--- a/docs/RELEASE_READINESS.md
+++ b/docs/RELEASE_READINESS.md
@@ -36,13 +36,13 @@ privacy review.
 - [x] Merge `release/public-preview` into `main` through reviewed PR #1.
 - [x] Re-run the privacy, clean-clone, package, and documentation-link audit
   against the merged `main` branch.
-- [ ] Change repository visibility only after all preceding items pass.
+- [x] Change repository visibility only after all preceding items pass.
 
 ## Immediately after visibility changes
 
-- [ ] Enable GitHub private vulnerability reporting and verify the reporting
+- [x] Enable GitHub private vulnerability reporting and verify the reporting
   language in `SECURITY.md`.
-- [ ] Protect `main` against force pushes and require the CI checks supported by
+- [x] Protect `main` against force pushes and require the CI checks supported by
   the repository plan.
 - [ ] Create a `v0.1.0` GitHub prerelease with the developer-preview boundary
   and known limitations from `STATUS.md`.