diff --git a/changelog.md b/changelog.md
index 4a99bcd..80e42fa 100644
--- a/changelog.md
+++ b/changelog.md
@@ -2,6 +2,12 @@
 
 ## Pending
 
+### Features
+
+- add MFA security controls to the admin shell (catalog)
+  - adds authenticator app enrollment, backup code, and disable controls to the security page
+  - adds passkey registration and revocation UI with exported event detail types
+  - replaces placeholder MFA/passkey cards with connected control surfaces
 
 ## 2026-05-18 - 1.1.1