diff --git a/CHANGELOG.md b/CHANGELOG.md
index 456f751..62e40b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,21 @@
 
 ## [Unreleased]
 
+## Added
+
+- `inspect --json` now returns `host.{cliVersion, rpcSocketPath}` and `rendererRuntime.{profile, booted, bootInFlight}` for live sessions, plus `eventLogBytes` for both live and offline-replay sessions, so automation can verify which host CLI and socket they are talking to, whether the renderer has actually attached, and whether a session's event log looks truncated. All new fields are optional schema additions; existing envelope shapes are unchanged. Human output also gains `Host CLI Version`, `RPC Socket`, and `Event Log Bytes` lines ([#104](https://github.com/coder/agent-tty/pull/104)).
+- Canonical proof-bundle lock-down: `CanonicalBundleManifestSchema` now requires `sha256` and `bytes` on every artifact, and `validate-bundle --profile canonical` runs eight drift checks (manifest parse, artifacts present with path-traversal guard, byte and sha256 match, reproduce script, command-status TSV clean if pass, notes/README present) plus a `dogfood/CATALOG.md` parity check. Wired into `mise run validate-bundles`, `npm run validate-bundle:canonical`, and the `linux-static` CI job ([#104](https://github.com/coder/agent-tty/pull/104)).
+- New canonical manifests for `dogfood/run-command/` and `dogfood/agent-uses-agent-tty/`; existing `week9-release-readiness` and `week8-contract-locks` manifests gained per-artifact `sha256` + `bytes` ([#104](https://github.com/coder/agent-tty/pull/104)).
+- New `mise run demo:agent-uses-agent-tty` task and TypeScript Hero Demo generator that produces the promoted `dogfood/agent-uses-agent-tty/` bundle from real Codex and Claude Code TUIs using VHS as an external "outer camera", with task-pinned VHS/ttyd/ffmpeg invoked only on manual regeneration ([#105](https://github.com/coder/agent-tty/pull/105)).
+
+## Changed
+
+- The README "Agent Demo" now links the regenerated `dogfood/agent-uses-agent-tty/` Hero Demo bundle with 16:9 outer WebMs, thumbnails, transcripts, inner `agent-tty` cast/WebM proofs, prompts, final-file proofs, and manifest hashes. The previous recursive `agent-tty`-records-`agent-tty` flow has been replaced; the "Hero Claim Boundary" is now explicit in the README, dogfood catalog, glossary, ADR, and PRD: the outer TUI is presentation, the inner `agent-tty` artifacts are the product proof. Codex defaults to `gpt-5.5` and Claude to `claude-opus-4-7`, with CLI/env overrides for maintainers ([#105](https://github.com/coder/agent-tty/pull/105)).
+
+## Fixed
+
+- Host startup no longer crashes if `package.json` cannot be loaded; `loadPackageMetadata()` now degrades to a tolerant fallback used by `inspect --json` and the version envelope ([#104](https://github.com/coder/agent-tty/pull/104)).
+
 ## [v0.2.0] - 2026-05-13
 
 ### Added