diff --git a/CHANGELOG.md b/CHANGELOG.md
index c30545a..e335897 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,18 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-07 — Correct Ctrl+Alt+Del dispatch on Windows `agent 0.30.2`
+
+Fixes the Windows sign-in command still doing nothing after `0.30.1`. Console requests now keep
+the Windows service's own identity instead of borrowing the interactive helper's token, which
+Winlogon rejects. Requests for an RDP session are sent locally from its helper and are not repeated
+by the service.
+
+Consent, the visible notice, the target session and input deadlines are still checked before
+dispatch. Failed requests now record their reason in the agent's Application log.
+
+Update the agent release image. No API or web image update or database migration is required.
+
 ## 2026-10-07 — Ctrl+Alt+Del at Windows sign-in `agent 0.30.1`
 
 Sending **Ctrl+Alt+Del** in remote desktop now uses the Windows agent service in the watched