diff --git a/CHANGELOG.md b/CHANGELOG.md
index b479a6a..3b9f6fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,25 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-13 — Platform roles and organization roles `api 0.148.0` `web 0.180.0`
+
+**Two kinds of role, each with one name.** A **platform role** says what an account may do on the
+platform: none, **Super-admin**, or a role you wrote. An **organization role** says what a member
+may do in an organization: Owner, Administrator, Operator, Viewer, or one you wrote.
+
+- **"Member" is gone.** An account without a platform role shows none, in the user list, the
+  statistics and its own profile.
+- **The account form has one platform role field** instead of a Member / Super admin choice
+  followed by a second one.
+- **Users → Platform roles** (formerly Admin roles) lists the Super-admin first, locked, with how
+  many accounts hold it. The user list's filter offers Super-admin, each of your roles, and none.
+- **Only a Super-admin can make an account Super-admin**, take it away, or change a Super-admin's
+  account — its address, password, setup link, second factor, picture or deletion. Before, the
+  right to manage users was enough.
+
+Update the API and web images together. No agent update is required, and the schema does not
+change.
+
 ## 2026-10-13 — An organization's owner gets its apps at once `web 0.179.0`
 
 **The owner or an administrator of an organization is offered the Admin Center** in the app