diff --git a/VERSION b/VERSION
index 3eefcb9..7dea76e 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.0.0
+1.0.1
diff --git a/public/assets/admin.css b/public/assets/admin.css
index 925fb9e..f622a8a 100644
--- a/public/assets/admin.css
+++ b/public/assets/admin.css
@@ -600,3 +600,4 @@ details.card > summary:hover { background: #fafbf8 }
 .check-bad { color: var(--danger) }
 .log-list { list-style: none; margin: 14px 0 0; padding: 0; display: grid; gap: 6px }
 .log-list code { font-size: 11px; overflow-wrap: anywhere }
+.shell-version { margin: 0 0 4px; padding: 0 10px; font-size: 10px; color: var(--shell-muted) }
diff --git a/src/Twig/VersionExtension.php b/src/Twig/VersionExtension.php
new file mode 100644
index 0000000..f05915c
--- /dev/null
+++ b/src/Twig/VersionExtension.php
@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Twig;
+
+use App\Ops\Updater;
+use Twig\Extension\AbstractExtension;
+use Twig\TwigFunction;
+
+/**
+ * The running version, for the administration shell.
+ *
+ * A function rather than a global, so the templates get exactly this one read-only answer and not
+ * a whole updater with an update() method on it.
+ */
+final class VersionExtension extends AbstractExtension
+{
+    public function __construct(private Updater $updater)
+    {
+    }
+
+    public function getFunctions(): array
+    {
+        return [new TwigFunction('kant_version', $this->updater->version(...))];
+    }
+}
diff --git a/templates/admin/shell.html.twig b/templates/admin/shell.html.twig
index 06f77c6..b66e4e4 100644
--- a/templates/admin/shell.html.twig
+++ b/templates/admin/shell.html.twig
@@ -31,6 +31,7 @@
         </ul>
     </nav>
     <div class="shell-foot">
+        <p class="shell-version">Fassung {{ kant_version() }}</p>
         <a class="shell-user" href="{{ path('admin_account') }}"{{ nav|default('') == 'account' ? ' aria-current="page"' : '' }}><span class="shell-avatar" aria-hidden="true">{{ app.user.userIdentifier|first|upper }}</span><strong>{{ app.user.userIdentifier }}</strong></a>
         <form action="{{ path('admin_logout') }}" method="post">
             <input type="hidden" name="_csrf_token" value="{{ csrf_token('logout') }}">