diff --git a/.github/workflows/vetted.yml b/.github/workflows/vetted.yml
index 12413f0..f895c28 100644
--- a/.github/workflows/vetted.yml
+++ b/.github/workflows/vetted.yml
@@ -1,8 +1,9 @@
 name: Vetted
 
 # Vetted (https://github.com/makoydev/vetted) reviews every pull request in
-# this repository: shadow mode (audit record only, no comments) for the
-# first two weeks, until 2026-10-14, then opt-in with the `ai-review` label.
+# this repository. It ran in shadow mode (audit record only, no comments)
+# for the first two weeks; from 2026-10-14 it is opt-in: it comments on pull
+# requests labelled `ai-review` and keeps an audit record for every one.
 # Pinned to the exact commit of the v0.1.0 release.
 on:
   pull_request:
@@ -21,5 +22,5 @@ jobs:
       - name: Vetted AI Code Review
         uses: makoydev/vetted@2ae958e0fbf14fb9c74c2423059a49762927a192 # v0.1.0
         with:
-          mode: shadow
+          mode: opt-in
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 04c2b11..3750bdd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ All notable changes to this project are documented here. The format follows [Kee
 
 ## [Unreleased]
 
+### Changed
+
+- Vetted pilot switched from shadow mode to opt-in on 2026-10-14, after the two-week shadow period (issue V1): pull requests labelled `ai-review` now get Vetted's comments.
+
 ## [0.1.0] - 2026-10-06
 
 First release: Discreet, a privacy gateway that replaces Singapore personal data with placeholders before a request reaches an AI model and restores it in the answer, refuses automated eligibility decisions, and keeps a tamper-evident audit log. Reviewed and approved by Michael Mendoza on 2026-10-06.