diff --git a/CHANGELOG.md b/CHANGELOG.md
index dd612c5..9dff900 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,12 @@ for the authoritative per-release detail.
 
 ## Unreleased
 
+- `AuthStatusResponse.reloadRequired`: true when the hub's on-disk
+  auth config (or the env vars it references) no longer matches
+  the validator it enforces — a `ReloadAuth` is pending.
+  `anonymousAllowed` now reflects the LIVE enforcement state.
+  Regenerated stubs; hand-written dartdoc destaled from the
+  pre-rename `~/.fai` paths and `.fai` bundle extension.
 - Detached-runs monitor: `listInvocations()` returns every tracked
   detached invocation (newest-first) with id, phase, current step,
   timestamps, error, flow name and project — backs Studio's