diff --git a/.gitignore b/.gitignore
index 045affe..499318c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -30,4 +30,5 @@ Thumbs.db
 # Review gate state (transient)
 .review-state/
 .worker-state/
-releases/
+# Keep release tarballs in git for easy distribution
+# releases/
diff --git a/pkgs/worker/default.nix b/pkgs/worker/default.nix
index e045d06..78a61d0 100644
--- a/pkgs/worker/default.nix
+++ b/pkgs/worker/default.nix
@@ -1,17 +1,17 @@
 # Worker CLI Nix Package
 #
-# This package installs the worker CLI binary from a release tarball.
+# Multi-agent worker coordination CLI for HQ orchestration.
 # See docs/releasing-worker.md for how to create releases.
 #
-# To use:
-# 1. Copy this to dotfiles/pkgs/worker/default.nix
-# 2. Update the URL to point to your release location
-# 3. Update the sha256 hash (use nix-prefetch-url --unpack <url>)
-# 4. Add to your system/home configuration
+# DOTFILES INTEGRATION:
+# 1. Copy this file to dotfiles/pkgs/worker/default.nix
+# 2. Uncomment the appropriate src option below
+# 3. Add to your configuration:
+#      worker = pkgs.callPackage ./pkgs/worker {};
+#      home.packages = [ worker ];
 
 { lib
 , stdenvNoCC
-, fetchzip
 , fetchurl
 , autoPatchelfHook
 , stdenv
@@ -21,26 +21,19 @@ stdenvNoCC.mkDerivation (finalAttrs: {
   pname = "worker";
   version = "0.1.0";
 
-  # Option 1: Fetch from GitHub releases (when available)
-  # src = fetchzip {
-  #   url = "https://github.com/OWNER/skills/releases/download/worker-v${finalAttrs.version}/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-  #   sha256 = lib.fakeHash;  # Replace after first build attempt
-  #   stripRoot = false;
-  # };
-
-  # Option 2: Fetch from local/private git forge
-  # src = fetchzip {
-  #   url = "https://git.example.com/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-  #   sha256 = lib.fakeHash;
-  #   stripRoot = false;
-  # };
-
-  # Option 3: Local file (for testing)
+  # Option A: Fetch from skills repo tarball (recommended)
+  # Update URL to your git forge's raw file URL
   src = fetchurl {
-    url = "file:///home/dan/proj/skills/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
-    sha256 = "sha256-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=";  # Will fail, get real hash from error
+    url = "https://git.clarun.xyz/dan/skills/raw/branch/master/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
+    sha256 = "sha256-Lz+gnjeedjwVV31rcijjQpMguMrBfvSfOUcOyLaFiI8=";
   };
 
+  # Option B: Local file (for testing)
+  # src = fetchurl {
+  #   url = "file:///home/dan/proj/skills/releases/worker_${finalAttrs.version}_linux_amd64.tar.gz";
+  #   sha256 = "sha256-Lz+gnjeedjwVV31rcijjQpMguMrBfvSfOUcOyLaFiI8=";
+  # };
+
   sourceRoot = ".";
 
   nativeBuildInputs = [
diff --git a/releases/worker_0.1.0_linux_amd64.tar.gz b/releases/worker_0.1.0_linux_amd64.tar.gz
new file mode 100644
index 0000000..d5280b7
Binary files /dev/null and b/releases/worker_0.1.0_linux_amd64.tar.gz differ