diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index aa550fa..aa05694 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,6 +55,8 @@ jobs:
             exit 0
           fi
           "${{ runner.temp }}/wfctl-bin/wfctl" plugin verify-capabilities --binary "$BIN" .
+      - name: Verify shipped plugin.json carries tag (post-build)
+        run: '"${{ runner.temp }}/wfctl-bin/wfctl" plugin validate-contract --for-publish --tag ${{ github.ref_name }} --release-dir . .'
       - name: Publish GitHub release
         if: ${{ success() }}
         env:
diff --git a/plugin.json b/plugin.json
index 5b7dfdc..a533b14 100644
--- a/plugin.json
+++ b/plugin.json
@@ -1,6 +1,6 @@
 {
     "name": "workflow-plugin-infra",
-    "version": "1.0.0",
+    "version": "0.0.0",
     "description": "Abstract infra.* module types (13 types) with IaCProvider delegation",
     "author": "GoCodeAlone",
     "license": "MIT",