diff --git a/CHANGELOG.md b/CHANGELOG.md
index 686d08e..c4718e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,19 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-07 — Keep remote desktop connected through Windows sign-in `web 0.147.2` `agent 0.31.1`
+
+Windows Server can attach its console to an existing user session when you sign in, changing the
+Windows session ID. Remote desktop now follows that transition instead of reporting a lost notice
+and closing the connection. The new helper verifies its notice and carries the existing consent
+before capture and input continue. Fresh connections retain the organisation's consent policy.
+
+Lost connections now show a retry immediately. Retry establishes a new connection, ignores late
+responses from the previous attempt, and does not wait indefinitely on an inactive socket. Opening
+also explains that permission may need to be accepted on the remote screen.
+
+Update the web console and agent release image. No API or database update is required.
+
 ## 2026-10-07 — A clearer keyboard mode picker `web 0.147.1`
 
 The remote-desktop keyboard selector now matches the toolbar: a compact button opens a styled panel