diff --git a/changelog.mdx b/changelog.mdx
index 6b6c800..fe1ff1a 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -9,6 +9,28 @@ import { YouTubeVideo } from '/snippets/youtube-video.mdx';
 For API library updates, see the [Node SDK](https://github.com/onkernel/kernel-node-sdk/blob/main/CHANGELOG.md), [Python SDK](https://github.com/onkernel/kernel-python-sdk/blob/next/CHANGELOG.md), and [Go SDK](https://github.com/onkernel/kernel-go-sdk/blob/main/CHANGELOG.md) changelogs.
 </Note>
 
+<Update label="July 17" tags={["Product", "Docs"]}>
+## Product updates
+
+- Launched [browser telemetry](/browsers/telemetry): capture events from inside a browser session — console output, network activity, page lifecycle, user interactions, captcha solves, and operational signals like crashes — then stream them live or pull them later for analysis, with opt-in control over which categories you capture. Alongside the launch, we added an in-VM OTLP export sink and OTel-compatible support in the browser events API, so telemetry can be shipped to any OpenTelemetry-compatible collector.
+- Added new Grok 4.5 and Meta Muse Spark computer-use providers to [`@onkernel/cua-agent`](https://github.com/kernel/cua), along with a `--proxy` flag for routing the agent's browser through a Kernel proxy, configurable retries on transient provider errors, and opt-in recovery when a provider returns an exact-empty response.
+- Gave `kernel audit-logs` in the [CLI](https://github.com/kernel/cli) a `download` subcommand for chunked bulk exports and the ability to exclude multiple HTTP methods from `search`, so audit workflows can pull large windows without hitting pagination caps.
+- Improved cold-start performance: reduced Chromium restart time, and cut ~5s off session creation for profile-restore paths by fixing a chromium-launcher port check that blocked on stale sockets.
+- Set the default fill-rate for new [browser pools](/browsers/pools) created from the dashboard or [CLI](https://github.com/kernel/cli) to 25%, so pools warm up more predictably out of the box.
+- [`refresh_on_profile_update`](/browsers/pools) now defaults to `true` when a browser pool has a profile attached, and auto-unsets when the profile is removed, so pooled sessions stay in sync with the underlying profile without manual configuration.
+- Expanded [managed auth](/auth/overview): the dashboard can now manage credential fields and TOTP secrets directly, and reauth now selects an already signed-in account on the SSO account chooser, so re-authentications can complete without human intervention when the browser is already signed in.
+- Shipped a Cmd+K command palette to the dashboard for jump-to-anywhere navigation.
+- Published [`hermes-browser-plugin`](https://github.com/kernel/hermes-browser-plugin), a new Kernel cloud browser provider plugin for Hermes Agent.
+- Improved [just-html](https://github.com/kernel/just-html) with section deeplinks, comment permalinks, and a public integration-discovery metadata endpoint, so shared docs are easier to navigate, link, and index by agents.
+
+## Documentation updates
+
+- Published a new [Zero Data Retention](/info/zero-data-retention) page covering Kernel's ZDR posture.
+- Documented a "managed proxy without CAPTCHA solver" pattern for [stealth BYO proxy](/browsers/bot-detection/stealth) setups.
+- Moved the scaling guide into Introduction as a dedicated [Scale](/introduction/scale) page.
+- Documented in the [browser telemetry](/browsers/telemetry) guide which categories are disabled under BAA.
+</Update>
+
 <Update label="July 10" tags={["Product", "Docs"]}>
 ## Product updates