diff --git a/.changeset/cc-nc-nd-families.md b/.changeset/cc-nc-nd-families.md
deleted file mode 100644
index 309c51e..0000000
--- a/.changeset/cc-nc-nd-families.md
+++ /dev/null
@@ -1,24 +0,0 @@
----
-"@refkit/core": minor
-"@refkit/provider-openverse": minor
-"@refkit/provider-flickr": minor
-"@refkit/provider-wikimedia-commons": minor
-"@refkit/provider-freesound": minor
-"@refkit/provider-jamendo": minor
-"@refkit/provider-europeana": minor
-"@refkit/provider-internet-archive": minor
----
-
-Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
-
-NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
-family id (+ CC version), generate the attribution the license requires, and
-verdicts name the actual license in their reasons. Gating stays strict-deny —
-commercial/AI use of NC content is still denied; NC × `redistribution` intent now
-returns `needs-review` (was `denied`) because the intent cannot distinguish
-commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
-verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
-stays denied.
-
-Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
-need arms for the four new ids.
diff --git a/.changeset/evaluate-permissions.md b/.changeset/evaluate-permissions.md
deleted file mode 100644
index 8acb6b4..0000000
--- a/.changeset/evaluate-permissions.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@refkit/core": minor
----
-
-Export evaluatePermissions/PermissionKey/EvaluateOptions — programmable strict-deny gate; evaluateUse intents are now presets over it (behavior unchanged).
diff --git a/.changeset/mcp-verdict-tools.md b/.changeset/mcp-verdict-tools.md
deleted file mode 100644
index af75c5c..0000000
--- a/.changeset/mcp-verdict-tools.md
+++ /dev/null
@@ -1,14 +0,0 @@
----
-"@refkit/mcp": minor
----
-
-New stateless `evaluate_use` and `build_attribution` MCP tools — evaluate a
-license against an intended use, or build an attribution credit line, without a
-search round-trip. Zero-config `defaultProviders` now reads unified
-`REFKIT_<PROVIDER>_KEY` env names first (`REFKIT_UNSPLASH_KEY`,
-`REFKIT_PEXELS_KEY`, `REFKIT_PIXABAY_KEY`, `REFKIT_FLICKR_KEY`,
-`REFKIT_SMITHSONIAN_KEY`, `REFKIT_BRAVE_KEY`, `REFKIT_FREESOUND_KEY`,
-`REFKIT_JAMENDO_CLIENT_ID`, `REFKIT_EUROPEANA_KEY`), falling back to the legacy
-names (`UNSPLASH_KEY`, `PEXELS_KEY`, `PIXABAY_KEY`, `FLICKR_KEY`, `SI_KEY`,
-`BRAVE_TOKEN`, `FREESOUND_TOKEN`, `JAMENDO_CLIENT_ID`, `EUROPEANA_KEY`), which
-are still honored.
diff --git a/.changeset/orchestrator-hardening.md b/.changeset/orchestrator-hardening.md
deleted file mode 100644
index 6630f05..0000000
--- a/.changeset/orchestrator-hardening.md
+++ /dev/null
@@ -1,17 +0,0 @@
----
-"@refkit/core": minor
-"@refkit/mcp": minor
----
-
-Harden the search orchestrator: per-provider soft timeout (default 10s) and
-bounded retry on 429/5xx/network errors (default 1, exponential backoff) — on by
-default, tunable or disabled via `createRefkit({ resilience })`. Provider
-statuses in `searchWithMeta` now carry `latencyMs`, and supplying a `cache`
-(`KeyValueCache`) now memoizes per-provider results (key
-`refkit:v1:<provider>:<queryHash>`, TTL via the new `cacheTtlMs` option, default
-5 min) with hits flagged `cached: true`. Merge, rerank, and the license gate
-always run fresh. New exports: `withTimeout`, `retryingFetch`, and the
-`ResilienceOptions`, `TimeoutHandle`, `RetryOptions` types.
-
-The MCP `search_references` structured output (`explain: true`) now surfaces
-`latencyMs` per provider and `cached` on cache hits.
diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
index b61b57c..38af43e 100644
--- a/packages/core/CHANGELOG.md
+++ b/packages/core/CHANGELOG.md
@@ -1,5 +1,37 @@
 # @refkit/core
 
+## 0.6.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+- 8300c18: Export evaluatePermissions/PermissionKey/EvaluateOptions — programmable strict-deny gate; evaluateUse intents are now presets over it (behavior unchanged).
+- c6b6061: Harden the search orchestrator: per-provider soft timeout (default 10s) and
+  bounded retry on 429/5xx/network errors (default 1, exponential backoff) — on by
+  default, tunable or disabled via `createRefkit({ resilience })`. Provider
+  statuses in `searchWithMeta` now carry `latencyMs`, and supplying a `cache`
+  (`KeyValueCache`) now memoizes per-provider results (key
+  `refkit:v1:<provider>:<queryHash>`, TTL via the new `cacheTtlMs` option, default
+  5 min) with hits flagged `cached: true`. Merge, rerank, and the license gate
+  always run fresh. New exports: `withTimeout`, `retryingFetch`, and the
+  `ResilienceOptions`, `TimeoutHandle`, `RetryOptions` types.
+
+  The MCP `search_references` structured output (`explain: true`) now surfaces
+  `latencyMs` per provider and `cached` on cache hits.
+
 ## 0.5.0
 
 ### Minor Changes
diff --git a/packages/core/package.json b/packages/core/package.json
index 0ba003c..d36b3b0 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/core",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "refkit core — neutral reference-retrieval brain: Reference/RightsRecord contract, license normalization, strict-deny use-gate, RRF merge/dedup, ReferenceProvider interfaces. Zero-network, zero-provider, only zod.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md
index d8b8fe5..e620a59 100644
--- a/packages/mcp/CHANGELOG.md
+++ b/packages/mcp/CHANGELOG.md
@@ -1,5 +1,57 @@
 # @refkit/mcp
 
+## 0.5.0
+
+### Minor Changes
+
+- 6a9b7e9: New stateless `evaluate_use` and `build_attribution` MCP tools — evaluate a
+  license against an intended use, or build an attribution credit line, without a
+  search round-trip. Zero-config `defaultProviders` now reads unified
+  `REFKIT_<PROVIDER>_KEY` env names first (`REFKIT_UNSPLASH_KEY`,
+  `REFKIT_PEXELS_KEY`, `REFKIT_PIXABAY_KEY`, `REFKIT_FLICKR_KEY`,
+  `REFKIT_SMITHSONIAN_KEY`, `REFKIT_BRAVE_KEY`, `REFKIT_FREESOUND_KEY`,
+  `REFKIT_JAMENDO_CLIENT_ID`, `REFKIT_EUROPEANA_KEY`), falling back to the legacy
+  names (`UNSPLASH_KEY`, `PEXELS_KEY`, `PIXABAY_KEY`, `FLICKR_KEY`, `SI_KEY`,
+  `BRAVE_TOKEN`, `FREESOUND_TOKEN`, `JAMENDO_CLIENT_ID`, `EUROPEANA_KEY`), which
+  are still honored.
+- c6b6061: Harden the search orchestrator: per-provider soft timeout (default 10s) and
+  bounded retry on 429/5xx/network errors (default 1, exponential backoff) — on by
+  default, tunable or disabled via `createRefkit({ resilience })`. Provider
+  statuses in `searchWithMeta` now carry `latencyMs`, and supplying a `cache`
+  (`KeyValueCache`) now memoizes per-provider results (key
+  `refkit:v1:<provider>:<queryHash>`, TTL via the new `cacheTtlMs` option, default
+  5 min) with hits flagged `cached: true`. Merge, rerank, and the license gate
+  always run fresh. New exports: `withTimeout`, `retryingFetch`, and the
+  `ResilienceOptions`, `TimeoutHandle`, `RetryOptions` types.
+
+  The MCP `search_references` structured output (`explain: true`) now surfaces
+  `latencyMs` per provider and `cached` on cache hits.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+  - @refkit/provider-openverse@0.3.0
+  - @refkit/provider-flickr@0.3.0
+  - @refkit/provider-wikimedia-commons@0.3.0
+  - @refkit/provider-freesound@0.3.0
+  - @refkit/provider-jamendo@0.3.0
+  - @refkit/provider-europeana@0.3.0
+  - @refkit/provider-internet-archive@0.3.0
+  - @refkit/provider-artic@0.2.2
+  - @refkit/provider-brave@0.2.2
+  - @refkit/provider-gutendex@0.2.2
+  - @refkit/provider-met@0.2.2
+  - @refkit/provider-pexels@0.2.2
+  - @refkit/provider-pixabay@0.2.2
+  - @refkit/provider-poetrydb@0.2.2
+  - @refkit/provider-polyhaven@0.2.1
+  - @refkit/provider-rijksmuseum@0.2.1
+  - @refkit/provider-smithsonian@0.2.2
+  - @refkit/provider-unsplash@0.2.2
+
 ## 0.4.0
 
 ### Minor Changes
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index 152685f..cdd11eb 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/mcp",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "MCP server for refkit — exposes license-normalized reference search as an agent tool.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-artic/CHANGELOG.md b/packages/provider-artic/CHANGELOG.md
index a6ae0c8..d11b4ca 100644
--- a/packages/provider-artic/CHANGELOG.md
+++ b/packages/provider-artic/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-artic
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-artic/package.json b/packages/provider-artic/package.json
index 09cce2c..5078a55 100644
--- a/packages/provider-artic/package.json
+++ b/packages/provider-artic/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-artic",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Art Institute of Chicago provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-brave/CHANGELOG.md b/packages/provider-brave/CHANGELOG.md
index 8f19441..c232ccc 100644
--- a/packages/provider-brave/CHANGELOG.md
+++ b/packages/provider-brave/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-brave
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-brave/package.json b/packages/provider-brave/package.json
index ddf9ad2..956ac7d 100644
--- a/packages/provider-brave/package.json
+++ b/packages/provider-brave/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-brave",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Brave Search web-discovery provider satellite for refkit — open-web image breadth, license:unknown (use-gated to needs-review).",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-europeana/CHANGELOG.md b/packages/provider-europeana/CHANGELOG.md
index 8db282d..ad42a1e 100644
--- a/packages/provider-europeana/CHANGELOG.md
+++ b/packages/provider-europeana/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-europeana
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-europeana/package.json b/packages/provider-europeana/package.json
index 4026f81..c40f861 100644
--- a/packages/provider-europeana/package.json
+++ b/packages/provider-europeana/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-europeana",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Europeana provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-flickr/CHANGELOG.md b/packages/provider-flickr/CHANGELOG.md
index 8e72dc5..fddd8e6 100644
--- a/packages/provider-flickr/CHANGELOG.md
+++ b/packages/provider-flickr/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-flickr
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-flickr/package.json b/packages/provider-flickr/package.json
index 2b2b494..6c8c311 100644
--- a/packages/provider-flickr/package.json
+++ b/packages/provider-flickr/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-flickr",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Flickr provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-freesound/CHANGELOG.md b/packages/provider-freesound/CHANGELOG.md
index 233be86..3570d96 100644
--- a/packages/provider-freesound/CHANGELOG.md
+++ b/packages/provider-freesound/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-freesound
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-freesound/package.json b/packages/provider-freesound/package.json
index 7ee1012..1e01f62 100644
--- a/packages/provider-freesound/package.json
+++ b/packages/provider-freesound/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-freesound",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Freesound provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-gutendex/CHANGELOG.md b/packages/provider-gutendex/CHANGELOG.md
index c3206e8..bf1534e 100644
--- a/packages/provider-gutendex/CHANGELOG.md
+++ b/packages/provider-gutendex/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-gutendex
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-gutendex/package.json b/packages/provider-gutendex/package.json
index e29480d..6e23aff 100644
--- a/packages/provider-gutendex/package.json
+++ b/packages/provider-gutendex/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-gutendex",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Gutendex (Project Gutenberg) provider satellite for refkit — public-domain book references, per-item copyright→license.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-internet-archive/CHANGELOG.md b/packages/provider-internet-archive/CHANGELOG.md
index 9088d90..15a8005 100644
--- a/packages/provider-internet-archive/CHANGELOG.md
+++ b/packages/provider-internet-archive/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-internet-archive
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-internet-archive/package.json b/packages/provider-internet-archive/package.json
index 298721b..cd906a5 100644
--- a/packages/provider-internet-archive/package.json
+++ b/packages/provider-internet-archive/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-internet-archive",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Internet Archive provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-jamendo/CHANGELOG.md b/packages/provider-jamendo/CHANGELOG.md
index bebea7d..22345a3 100644
--- a/packages/provider-jamendo/CHANGELOG.md
+++ b/packages/provider-jamendo/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-jamendo
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-jamendo/package.json b/packages/provider-jamendo/package.json
index a5fb1be..8b8930a 100644
--- a/packages/provider-jamendo/package.json
+++ b/packages/provider-jamendo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-jamendo",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Jamendo provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-met/CHANGELOG.md b/packages/provider-met/CHANGELOG.md
index 04e7344..306d545 100644
--- a/packages/provider-met/CHANGELOG.md
+++ b/packages/provider-met/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-met
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-met/package.json b/packages/provider-met/package.json
index 584bddb..0172fec 100644
--- a/packages/provider-met/package.json
+++ b/packages/provider-met/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-met",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "The Metropolitan Museum of Art provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-openverse/CHANGELOG.md b/packages/provider-openverse/CHANGELOG.md
index 69f2481..330d05e 100644
--- a/packages/provider-openverse/CHANGELOG.md
+++ b/packages/provider-openverse/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-openverse
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-openverse/package.json b/packages/provider-openverse/package.json
index 0460c42..49c94a4 100644
--- a/packages/provider-openverse/package.json
+++ b/packages/provider-openverse/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-openverse",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Openverse provider satellite for refkit — CC/PD licensed image search, license-normalized.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-pexels/CHANGELOG.md b/packages/provider-pexels/CHANGELOG.md
index f1830ea..5d1fe4f 100644
--- a/packages/provider-pexels/CHANGELOG.md
+++ b/packages/provider-pexels/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-pexels
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-pexels/package.json b/packages/provider-pexels/package.json
index cf6742f..f951092 100644
--- a/packages/provider-pexels/package.json
+++ b/packages/provider-pexels/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-pexels",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Pexels provider satellite for refkit — image search, hotlink-required.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-pixabay/CHANGELOG.md b/packages/provider-pixabay/CHANGELOG.md
index affe805..dca72b4 100644
--- a/packages/provider-pixabay/CHANGELOG.md
+++ b/packages/provider-pixabay/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-pixabay
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-pixabay/package.json b/packages/provider-pixabay/package.json
index 67da558..c10ba53 100644
--- a/packages/provider-pixabay/package.json
+++ b/packages/provider-pixabay/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-pixabay",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Pixabay provider satellite for refkit — image search, cache-allowed.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-poetrydb/CHANGELOG.md b/packages/provider-poetrydb/CHANGELOG.md
index 4a9d905..8d439ca 100644
--- a/packages/provider-poetrydb/CHANGELOG.md
+++ b/packages/provider-poetrydb/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-poetrydb
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-poetrydb/package.json b/packages/provider-poetrydb/package.json
index 300dd77..c297cd3 100644
--- a/packages/provider-poetrydb/package.json
+++ b/packages/provider-poetrydb/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-poetrydb",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "PoetryDB provider satellite for refkit — classic public-domain poems.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-polyhaven/CHANGELOG.md b/packages/provider-polyhaven/CHANGELOG.md
index 0a12de6..dc087cc 100644
--- a/packages/provider-polyhaven/CHANGELOG.md
+++ b/packages/provider-polyhaven/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-polyhaven
 
+## 0.2.1
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-polyhaven/package.json b/packages/provider-polyhaven/package.json
index 96771a5..15018d0 100644
--- a/packages/provider-polyhaven/package.json
+++ b/packages/provider-polyhaven/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-polyhaven",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Poly Haven provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-rijksmuseum/CHANGELOG.md b/packages/provider-rijksmuseum/CHANGELOG.md
index 9f9749e..d064122 100644
--- a/packages/provider-rijksmuseum/CHANGELOG.md
+++ b/packages/provider-rijksmuseum/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-rijksmuseum
 
+## 0.2.1
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.0
 
 ### Minor Changes
diff --git a/packages/provider-rijksmuseum/package.json b/packages/provider-rijksmuseum/package.json
index dbcd32d..6dc9545 100644
--- a/packages/provider-rijksmuseum/package.json
+++ b/packages/provider-rijksmuseum/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-rijksmuseum",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Rijksmuseum provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-smithsonian/CHANGELOG.md b/packages/provider-smithsonian/CHANGELOG.md
index 5dbe28e..0015d07 100644
--- a/packages/provider-smithsonian/CHANGELOG.md
+++ b/packages/provider-smithsonian/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-smithsonian
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-smithsonian/package.json b/packages/provider-smithsonian/package.json
index aa56d65..5b03cf8 100644
--- a/packages/provider-smithsonian/package.json
+++ b/packages/provider-smithsonian/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-smithsonian",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Smithsonian Open Access provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-testkit/CHANGELOG.md b/packages/provider-testkit/CHANGELOG.md
new file mode 100644
index 0000000..e546156
--- /dev/null
+++ b/packages/provider-testkit/CHANGELOG.md
@@ -0,0 +1,10 @@
+# @refkit/provider-testkit
+
+## 0.0.1
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
diff --git a/packages/provider-testkit/package.json b/packages/provider-testkit/package.json
index e7faf9d..121ce06 100644
--- a/packages/provider-testkit/package.json
+++ b/packages/provider-testkit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-testkit",
-  "version": "0.0.0",
+  "version": "0.0.1",
   "private": true,
   "description": "Conformance test helpers for refkit provider satellites (internal, not published).",
   "type": "module",
diff --git a/packages/provider-unsplash/CHANGELOG.md b/packages/provider-unsplash/CHANGELOG.md
index 1262a9f..5144018 100644
--- a/packages/provider-unsplash/CHANGELOG.md
+++ b/packages/provider-unsplash/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @refkit/provider-unsplash
 
+## 0.2.2
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-unsplash/package.json b/packages/provider-unsplash/package.json
index ef80495..c9699aa 100644
--- a/packages/provider-unsplash/package.json
+++ b/packages/provider-unsplash/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-unsplash",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Unsplash provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-wikimedia-commons/CHANGELOG.md b/packages/provider-wikimedia-commons/CHANGELOG.md
index 6d3be0a..8e3f58f 100644
--- a/packages/provider-wikimedia-commons/CHANGELOG.md
+++ b/packages/provider-wikimedia-commons/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @refkit/provider-wikimedia-commons
 
+## 0.3.0
+
+### Minor Changes
+
+- 991d467: Add first-class CC NC/ND license families: `CC-BY-NC`, `CC-BY-NC-SA`, `CC-BY-NC-ND`, `CC-BY-ND`.
+
+  NC/ND-licensed results no longer collapse to `proprietary`: they keep their real
+  family id (+ CC version), generate the attribution the license requires, and
+  verdicts name the actual license in their reasons. Gating stays strict-deny —
+  commercial/AI use of NC content is still denied; NC × `redistribution` intent now
+  returns `needs-review` (was `denied`) because the intent cannot distinguish
+  commercial from non-commercial redistribution. `CC-BY-ND` now correctly allows
+  verbatim commercial reuse (`allowed-with-attribution`) while AI/derivative use
+  stays denied.
+
+  Note for TypeScript consumers: exhaustive `switch` statements over `LicenseId`
+  need arms for the four new ids.
+
+### Patch Changes
+
+- Updated dependencies [991d467]
+- Updated dependencies [8300c18]
+- Updated dependencies [c6b6061]
+  - @refkit/core@0.6.0
+
 ## 0.2.1
 
 ### Patch Changes
diff --git a/packages/provider-wikimedia-commons/package.json b/packages/provider-wikimedia-commons/package.json
index ffb2270..77cbd4e 100644
--- a/packages/provider-wikimedia-commons/package.json
+++ b/packages/provider-wikimedia-commons/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-wikimedia-commons",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "Wikimedia Commons provider satellite for refkit.",
   "type": "module",
   "license": "Apache-2.0",