diff --git a/changelog.mdx b/changelog.mdx
index af142cc5..02d73f2b 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -9,6 +9,27 @@ import { YouTubeVideo } from '/snippets/youtube-video.mdx';
 For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-node-sdk/blob/main/CHANGELOG.md), [Python SDK](https://github.com/onkernel/kernel-python-sdk/blob/next/CHANGELOG.md), and [Go SDK](https://github.com/onkernel/kernel-go-sdk/blob/main/CHANGELOG.md) changelogs.
 </Note>
 
+<Update label="August 28" tags={["Product", "Docs"]}>
+## Product updates
+
+- Launched a [bug bounty program](/security-vulnerability-reporting) covering the Kernel API, dashboard, MCP server, and browser infrastructure. The published scope and policy define eligible targets, severity tiers, and safe-harbor terms for security researchers.
+- Split browser telemetry into `control` (agent-driven browser actions) and a new opt-in `platform` category for VM-management calls like recording capture, profile save, and telemetry publish. The default capture set is now cleaner and cheaper, and `executePlaywrightCode` events include the submitted code (clipped to 8 KB).
+- Enabled **WebMCP by default** in Kernel browsers and consolidated the browser feature flags into a single feature list, giving agents Model Context Protocol access out of the box without extra configuration.
+- Improved [MCP server](/reference/mcp-server) support for the OpenAI Apps SDK with the required domain verification challenge, so Kernel MCP can be registered as an OpenAI App connector.
+- Added a `submit_feedback` tool to the [MCP server](/reference/mcp-server) for product, MCP, documentation, and general feedback, so agents can report a problem without leaving the session. Submissions are redacted of emails, URLs, and token-shaped values before capture.
+- Improved managed auth credential correction: [`@onkernel/managed-auth-react`](https://github.com/kernel/managed-auth-react) surfaces a notice when a field value is rejected, and submitting a corrected value now retries the login instead of failing the flow. Consent prompts are also gated until session initialization completes.
+- Extended the [CLI](https://github.com/kernel/cli) (v0.32.0–v0.33.0) with an `fx` MCP install target for one-command setup of the fx MCP.
+- Reduced Playwright per-frame overhead by memoizing page target IDs, cutting redundant CDP lookups during multi-step automations.
+- Upgraded [Hypeman](https://docs.hypeman.sh) to Firecracker v1.16.1, picking up upstream snapshot-restore and jailer fixes for the microVM runtime. New instances and snapshots use v1.16.1; existing snapshots keep restoring on the Firecracker version recorded in their metadata.
+
+## Documentation updates
+
+- Documented the new `control` vs `platform` [browser telemetry categories](/browsers/telemetry/categories), including which operations fall into each and how to opt in to platform events.
+- Added a **navigation path recommendation** to the [bot detection guide](/browsers/bot-detection) so agents land on target pages through the flows real users take, rather than deep-linking into gated URLs.
+- Added an [`fx` MCP setup guide](/reference/mcp-server/clients/fx) covering both CLI and MCP installation paths.
+- Made kernel.sh agent-readable: the homepage server-renders with a no-JavaScript fallback, and `llms.txt`, `index.md`, and the OpenAPI, OAuth, and MCP discovery surfaces are published for agents that read the site directly.
+</Update>
+
 <Update label="August 21" tags={["Product", "Docs"]}>
 ## Product updates