diff --git a/README.md b/README.md
index 4e28c02..7361f95 100644
--- a/README.md
+++ b/README.md
@@ -167,7 +167,7 @@ Piperless shells out to system binaries. It was built with defense-in-depth from
 - **Process isolation** — `set_time_limit()` guards with configurable timeouts
 - **open_basedir aware** — string-prefix matching before any filesystem call to prevent hangs
 
-Comprehensive review: **29/29 categories cleared. Zero critical, zero high, zero medium findings.**
+Comprehensive review: **29/29 categories cleared. 1 logic bug found and fixed. Zero open findings.** [See full audit →](AUDIT.md)
 
 ---
 
diff --git a/doc/index.html b/doc/index.html
index 6691114..81ff111 100644
--- a/doc/index.html
+++ b/doc/index.html
@@ -3,7 +3,7 @@
 <head>
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>Piperless v1.0.0 — Developer Documentation</title>
+<title>Piperless v1.1.0 — Developer Documentation</title>
 <style>
 :root {
   --bg: #ffffff;
@@ -55,7 +55,7 @@ td:first-child { font-family: "SF Mono", Monaco, monospace; font-size: 13px; }
 <body>
 
 <nav>
-  <h2>Piperless 1.0.0</h2>
+  <h2>Piperless 1.1.0</h2>
   <a href="#overview">Overview</a>
   <a href="#architecture">Architecture</a>
   <a href="#plugin">Plugin (Orchestrator)</a>
@@ -74,7 +74,7 @@ td:first-child { font-family: "SF Mono", Monaco, monospace; font-size: 13px; }
 <main>
 
 <h1>Piperless</h1>
-<p>WordPress Plugin — Audio Transcripts via Piper TTS &middot; v1.0.0 &middot; Generated 2026-05-09</p>
+<p>WordPress Plugin — Audio Transcripts via Piper TTS &middot; v1.1.0 &middot; Generated 2026-05-09</p>
 
 <h2 id="overview">Overview</h2>
 <p>
@@ -396,6 +396,8 @@ for deterministic attribution.
 
 <h2 id="security">Security Model</h2>
 
+<p><strong>Comprehensive security audit:</strong> 29/29 categories cleared, 1 finding fixed, zero open. <a href="AUDIT.md">Read the full audit →</a></p>
+
 <h4>Command Execution</h4>
 <ul>
   <li>All binary/model paths use <code>escapeshellarg()</code> — zero <code>escapeshellcmd()</code> calls</li>
