diff --git a/changelog.mdx b/changelog.mdx
index 054bb54..af142cc 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -9,6 +9,27 @@ import { YouTubeVideo } from '/snippets/youtube-video.mdx';
 For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-node-sdk/blob/main/CHANGELOG.md), [Python SDK](https://github.com/onkernel/kernel-python-sdk/blob/next/CHANGELOG.md), and [Go SDK](https://github.com/onkernel/kernel-go-sdk/blob/main/CHANGELOG.md) changelogs.
 </Note>
 
+<Update label="August 21" tags={["Product", "Docs"]}>
+## Product updates
+
+- Added **org entitlements**: a read-only `GET /org/entitlements` endpoint returning your organization's effective feature access and constraints after applying its plan, active trial treatment, plan status, and any organization-specific overrides. Null constraint values mean unlimited.
+- Added a **`memory` option** when creating a browser: request `16GiB` instead of the default `8GiB` for headful, non-GPU sessions. Every browser now reports its allocation on create, read, list, and pool acquire.
+- Added **customer-configurable OTLP export** for on-demand browser sessions. Create, list, update, and delete project-scoped OTLP/HTTP destinations through the API or [CLI](https://github.com/kernel/cli), then point a session at one with `telemetry.export.otlp.destination` when creating a browser. Destination headers are encrypted at rest and returned redacted. Browser pools do not support export.
+- Expanded [browser telemetry](/browsers/telemetry/overview) with two event types: proxy failures now arrive as first-class `proxy_error` events carrying a typed code instead of being buried in the raw network stream, and the CDP commands that drive the browser — input gestures, navigation, dialogs, file selection, screenshots — are reported as `cdp_command` under the `control` category.
+- [Proxy](/proxies/overview) configurations are now cleaned up automatically. Once an organization has more than 100 active configurations, those unused for 14 days are deleted; anything attached to a session, browser pool, instance, or managed auth connection is retained.
+- Extended the [CLI](https://github.com/kernel/cli) (v0.30.0–v0.31.0) with the `kernel telemetry destinations` command group, `--memory` on `browsers create`, `--proxy-name` / `--proxy-mode` and `--telemetry-export-otlp` across browser and managed auth commands, a new `kernel auth context` for inspecting the principal and scope behind your credentials, `--name` and `--query` filters on the list commands, and a Stagehand v4 project template. Note that `kernel browsers list` changed its column order, so scripts parsing that table positionally need updating.
+
+## Documentation updates
+
+- Added a [Foreman integration guide](/integrations/vercel/foreman) to the Vercel section.
+- Documented [replay iframe embedding](/browsers/replays) for embedding session replays inside your own dashboards.
+- Documented the 30-day retention window for browser telemetry events.
+- Documented automatic [proxy](/proxies/overview) cleanup behavior.
+- Added a print-to-PDF example to the Chrome policies doc.
+- Documented deployment API key lifecycle and the list of reserved env vars that cannot be overridden at deploy time.
+- Updated [Stagehand integration](/integrations/stagehand) docs to v4.
+</Update>
+
 <Update label="August 14" tags={["Product", "Docs"]}>
 ## Product updates