diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3768967..afd26ac 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,18 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-08 — The operator sees and answers UAC prompts after the person has approved the session `agent 0.42.0`
+
+When the person at the machine had approved the session in its consent window, a later UAC prompt or
+lock screen left the operator in front of "A Windows security screen is open on the machine" until
+it closed, and the session ended about ten seconds later. Windows refused to move the notice onto the
+secure screen, because the clicked consent window had left Windows' own text-input objects behind
+on the thread that draws the notice. The notice is now put up on the secure screen by a fresh thread
+each time the person changes screen, so the operator sees the UAC prompt under the notice and can
+answer it or type the administrator's password.
+
+Update the agent release image. No API, web or database update is required.
+
 ## 2026-10-08 — A UAC prompt no longer ends a remote-desktop session `agent 0.41.0`
 
 When a UAC prompt or the lock screen came up during a session, the operator could be disconnected