diff --git a/README.md b/README.md
index 24c34dd..fb3cc0a 100644
--- a/README.md
+++ b/README.md
@@ -72,3 +72,4 @@ Audited by [Spearbit](https://spearbit.com/) and Coinbase Protocol Security.
 | Spearbit audit 1 | 04/01/2025 | [Report](audits/Cantina-Report-04-01-2025.pdf) |
 | Coinbase Protocol Security audit 3 | 04/15/2025 | [Report](audits/CommercePaymentsAudit3CoinbaseProtoSec.pdf) |
 | Spearbit audit 2 | 04/22/2025 | [Report](audits/Cantina-Report-04-22-2025.pdf) |
+| Spearbit audit 3 (rounding and billing change, v1.1.0, #90) | 07/22/2026 | [Report](audits/report-cli-cantina-eb1cc8bc-577c-422d-ad76-db7495f29a5a-2026-07-22-coinbase-commerce-payments-pr-90.pdf) |
diff --git a/audits/report-cli-cantina-eb1cc8bc-577c-422d-ad76-db7495f29a5a-2026-07-22-coinbase-commerce-payments-pr-90.pdf b/audits/report-cli-cantina-eb1cc8bc-577c-422d-ad76-db7495f29a5a-2026-07-22-coinbase-commerce-payments-pr-90.pdf
new file mode 100644
index 0000000..54c46e8
Binary files /dev/null and b/audits/report-cli-cantina-eb1cc8bc-577c-422d-ad76-db7495f29a5a-2026-07-22-coinbase-commerce-payments-pr-90.pdf differ
diff --git a/docs/Security.md b/docs/Security.md
index 1d4ddba..2a8ad9b 100644
--- a/docs/Security.md
+++ b/docs/Security.md
@@ -11,6 +11,7 @@ Audited by [Spearbit](https://spearbit.com/) and Coinbase Protocol Security.
 | Spearbit audit 1 | 04/01/2025 | [Report](/audits/Cantina-Report-04-01-2025.pdf) |
 | Coinbase Protocol Security audit 3 | 04/15/2025 | [Report](/audits/CommercePaymentsAudit3CoinbaseProtoSec.pdf) |
 | Spearbit audit 2 | 04/22/2025 | [Report](/audits/Cantina-Report-04-22-2025.pdf) |
+| Spearbit audit 3 (rounding and billing change, v1.1.0, #90) | 07/22/2026 | [Report](/audits/report-cli-cantina-eb1cc8bc-577c-422d-ad76-db7495f29a5a-2026-07-22-coinbase-commerce-payments-pr-90.pdf) |
 
 # Security Analysis