diff --git a/CHANGELOG.md b/CHANGELOG.md
index b51bf1c..c30545a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,17 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-07 — Ctrl+Alt+Del at Windows sign-in `agent 0.30.1`
+
+Sending **Ctrl+Alt+Del** in remote desktop now uses the Windows agent service in the watched
+session, including a server with nobody signed in. The helper still verifies consent and the notice
+on the screen before authorizing the request.
+
+Expired requests and requests whose helper has disconnected are refused. A slow Windows call no
+longer holds up subsequent input or allows repeated requests to accumulate.
+
+Update the agent release image. No API or web image update or database migration is required.
+
 ## 2026-10-07 — Less clutter on the verification screen `web 0.146.1`
 
 The second-factor screen goes straight from its heading to your verification method. The password