diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
new file mode 100644
index 00000000..5df4a69b
--- /dev/null
+++ b/.github/workflows/validate.yml
@@ -0,0 +1,18 @@
+name: Build and AppInspect
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  build-appinspect:
+    uses: Bre77/splunk_nats/.github/workflows/_reusable-build-appinspect.yml@main
+    with:
+      app_dir: "."
+      use_ucc_gen: false
+      build_command: "./.build.sh"
+      package_glob: "*.spl"
+      node_version: "20"
+      splunk_python_version: "3.9"
+      fail_on: "errors"
diff --git a/AGENTS.md b/AGENTS.md
index 64bcacda..23071122 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -14,6 +14,11 @@ The `@splunk/*` frontend stack must move as one unit. `@splunk/react-page` pins
 
 - The stack stays on React 16 and styled-components 5: no published `@splunk/react-ui` accepts React 19, and `react-ui` still peers styled-components `^5.3.10`. React 16->18 and styled-components 6 are separate, independent efforts.
 
+## Release
+
+- Version lives in two places, kept in sync: `package.json` `version` and `src/main/resources/splunk/default/app.conf` (`[id]` and `[launcher]` stanzas). Splunkbase republish requires bumping past the last published version.
+- `.github/workflows/validate.yml` runs `./.build.sh` (writes `badrcm.spl` to repo root) via `Bre77/splunk_nats`'s reusable build+AppInspect workflow, gated on `fail_on: errors`. No publish step or secrets live in CI; publishing to Splunkbase is a separate manual step.
+
 ## Maintaining this file
 
 Keep this file for knowledge useful to almost every future agent session in this project.
diff --git a/package.json b/package.json
index cb96cbd1..ee495abb 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "badrcm",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "license": "https://cdn.splunkbase.splunk.com/static/misc/eula.html",
     "splunkbaseid": 6277,
     "scripts": {
diff --git a/src/main/resources/splunk/default/app.conf b/src/main/resources/splunk/default/app.conf
index f4caf996..40d69724 100644
--- a/src/main/resources/splunk/default/app.conf
+++ b/src/main/resources/splunk/default/app.conf
@@ -1,6 +1,6 @@
 [id]
 name = badrcm
-version = 1.0.3
+version = 1.0.4
 
 [ui]
 is_visible = 1
@@ -10,7 +10,7 @@ supported_themes = light,dark
 [launcher]
 author = s7orm
 description = Tool for managing Splunk configuration locally and remotely using the REST API.
-version = 1.0.3
+version = 1.0.4
 
 [package]
 check_for_updates = 1