diff --git a/CHANGELOG.md b/CHANGELOG.md
index 353c519..5edd1fa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,12 @@ All notable changes to light-tokenmeter are listed here. The format follows
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-10-23
+
+The first stable release, together with Keystone. The Model Switchboard. (KTMS) 1.0 and
+ktms-admin 1.0. From here on, what [API stability](README.md#api-stability) lists changes
+incompatibly only in a new major version. Upgrade from 0.1.x in one step.
+
 ### Added
 - `cache_read_tokens` and `cache_write_tokens` on usage events (`usage.v1` fields 17 and 18) and
   summed in summary and by-meta rows: the input tokens read from and written to the vendor's
@@ -45,6 +51,7 @@ All notable changes to light-tokenmeter are listed here. The format follows
 - Relicensed under Apache 2.0.
 
 ### Security
+- The startup log no longer contains the Postgres password: it named the whole `DATABASE_URL`.
 - clickhouse-go v2.49.0 with ch-go v0.74.0, fixing GO-2025-3603 in the ClickHouse protocol reader.
 
 ## [0.1.2] - 2026-10-21
@@ -72,7 +79,8 @@ All notable changes to light-tokenmeter are listed here. The format follows
 First release: append-only, idempotent usage events over HTTP and gRPC, daily summaries with
 filters and groupings, and usage by meta.
 
-[Unreleased]: https://github.com/ai-process/light-tokenmeter/compare/0.1.2...HEAD
+[Unreleased]: https://github.com/ai-process/light-tokenmeter/compare/v1.0.0...HEAD
+[1.0.0]: https://github.com/ai-process/light-tokenmeter/compare/0.1.2...v1.0.0
 [0.1.2]: https://github.com/ai-process/light-tokenmeter/compare/0.1.1...0.1.2
 [0.1.1]: https://github.com/ai-process/light-tokenmeter/compare/0.1.0...0.1.1
 [0.1.0]: https://github.com/ai-process/light-tokenmeter/releases/tag/0.1.0
diff --git a/README.md b/README.md
index a31b03d..b992245 100644
--- a/README.md
+++ b/README.md
@@ -194,7 +194,7 @@ compute tokens per request, cost per request, average latency and error share yo
 
 Filters: `project_id`, `user_id`, `vendor`, `model`, `action_id`, `status` (must be `success`, `error`, `cancelled`, or `timeout`; invalid values return 400). Groupings:
 `group_by_project_id`, `group_by_user_id`, `group_by_vendor`, `group_by_model`,
-`group_by_action_id`, `group_by_status` (each `=true`).
+`group_by_action_id`, `group_by_status` (each `=true`). Fields you do not group by are left out of the rows.
 
 Responses group by day based on event time (`occurred_at`, falling back to `created_at`). If query results exceed 10,000 rows, the response returns `truncated: true` and caps results at 10,000.
 
@@ -266,7 +266,7 @@ releases fix bugs.
 Not public, and free to change in any release: log message text (other than the prefix above),
 the `internal/` Go packages, the outbox's lease and retry timings, and resource numbers.
 
-### Compatibility with KTMS and ktms-admin
+### Compatibility with Keystone. The Model Switchboard. (KTMS) and ktms-admin
 
 | light-tokenmeter | Keystone (KTMS) | ktms-admin | Authentication |
 | --- | --- | --- | --- |