diff --git a/.gitea/workflows/release-dry-run.yml b/.gitea/workflows/release-dry-run.yml
index 894cb86..e9f257a 100644
--- a/.gitea/workflows/release-dry-run.yml
+++ b/.gitea/workflows/release-dry-run.yml
@@ -5,6 +5,7 @@ on:
     branches:
       - main
       - master
+      - codex/production-intelligence-terminal
   workflow_dispatch:
 
 jobs:
@@ -38,7 +39,11 @@ jobs:
 
           for path in "${placeholder_paths[@]}"; do
             [ -e "$path" ] || continue
-            if grep -RInE --exclude-dir=.git "$placeholder_pattern" "$path"; then
+            if grep -RInE \
+              --exclude-dir=.git \
+              --exclude=release-dry-run.yml \
+              --exclude=template-compliance.yml \
+              "$placeholder_pattern" "$path"; then
               echo "Unresolved template placeholders found."
               missing=1
             fi
diff --git a/.gitea/workflows/template-compliance.yml b/.gitea/workflows/template-compliance.yml
index ea5fae6..c636df0 100644
--- a/.gitea/workflows/template-compliance.yml
+++ b/.gitea/workflows/template-compliance.yml
@@ -5,6 +5,7 @@ on:
     branches:
       - main
       - master
+      - codex/production-intelligence-terminal
   pull_request:
   workflow_dispatch:
 
@@ -58,7 +59,11 @@ jobs:
 
           for path in "${paths[@]}"; do
             [ -e "$path" ] || continue
-            if grep -RInE --exclude-dir=.git "$pattern" "$path"; then
+            if grep -RInE \
+              --exclude-dir=.git \
+              --exclude=release-dry-run.yml \
+              --exclude=template-compliance.yml \
+              "$pattern" "$path"; then
               found=1
             fi
           done
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..3380d5c
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,9 @@
+# Changelog
+
+## 2.0.0 - 2026-05-16
+
+- Prepared Intelligence Terminal as a Docker-first Crucix fork for Dockge and Pangolin deployments.
+- Added Gitea Actions workflows for image builds, release dry runs, security scans, dependency checks, template compliance, and repository cleanup.
+- Documented agent context, release handoff, security review notes, and the Gitea Registry publishing target.
+- Hardened runtime defaults for container operation, including disabled browser auto-open, persistent `/app/runs`, and health endpoints.
+- Expanded configurable LLM provider support and source health diagnostics for intelligence sweeps.