diff --git a/CHANGELOG.md b/CHANGELOG.md
index 77a753e..9e9b107 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -78,3 +78,11 @@ First release with all 5 design-doc phases complete. ISO boots and runs K8s pods
 - Fixed KVM flag handling in dev-vm.sh (bash array context)
 - Added iptables table pre-initialization before kube-proxy start (nf_tables issue)
 - Added /dev/kmsg and /etc/machine-id creation for kubelet
+- Added CA certificates bundle to initramfs (containerd TLS verification for Docker Hub)
+- Added DNS fallback (10.0.2.3 + 8.8.8.8) when DHCP client doesn't populate resolv.conf
+- Added headless Service to Portainer Edge Agent manifest (agent peer discovery DNS)
+- Added kubesolo.edge_id/edge_key kernel boot parameters for Portainer Edge
+- Added auto-format of unformatted data disks on first boot
+- Rewrote dev-vm.sh for macOS: bsdtar ISO extraction, Homebrew mkfs.ext4 detection, direct kernel boot, TCG acceleration, port 8080 forwarding
+- Kubeconfig now served via HTTP on port 8080 (serial console truncates base64 lines)
+- Added 127.0.0.1 and 10.0.2.15 to API server SANs for QEMU port forwarding