diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 454cfc54..43d2231a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -60,15 +60,15 @@ jobs:
           node-version: '22'
           registry-url: 'https://registry.npmjs.org'
 
-      - name: Update npm for OIDC trusted publishing
-        run: npm install -g npm@latest  # Requires npm >= 11.5.1 for trusted publishing
+      - name: Update npm for provenance support
+        run: npm install -g npm@latest
 
       - name: Publish to npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           cd npm-package
-          npm publish --access public
-          # Uses OIDC trusted publishing - no token needed
-          # Provenance attestations are automatic with trusted publishing
+          npm publish --access public --provenance
 
   update-homebrew:
     runs-on: ubuntu-latest
diff --git a/README.md b/README.md
index 4b66454e..d3ef1543 100644
--- a/README.md
+++ b/README.md
@@ -97,7 +97,8 @@ Git-backed issue tracking system that stores work state as structured data.
 
 ```bash
 # Install Gas Town
-$ brew install gastown                                    # Homebrew
+$ brew tap steveyegge/gastown && brew install gt         # Homebrew (recommended)
+$ npm install -g @gastown/gt                              # npm
 $ go install github.com/steveyegge/gastown/cmd/gt@latest  # From source
 
 # If using go install, add Go binaries to PATH (add to ~/.zshrc or ~/.bashrc)