diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e99f21e..860ef4d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,7 @@ jobs:
   build-n-publish:
     name: Build and publish to PyPI
     runs-on: ubuntu-latest
+    environment: release # must exactly match what’s on PyPI
     permissions:
       id-token: write
     steps:
diff --git a/pyproject.toml b/pyproject.toml
index b08737a..df524be 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "quantaq-cli"
-version = "1.0.0rc2"
+version = "1.0.0rc3"
 description = "The QuantAQ Python Toolkit and CLI"
 authors = ["David H Hagan <david.hagan@quant-aq.com>"]
 license = "Apache-2.0"