diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1414296..1aa4b25 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,3 +7,14 @@ Format: [Keep a Changelog](https://keepachangelog.com).
 
 ### Added
 - Initial repo scaffolding
+
+### Added (Plan 1: Foundation)
+- LXC provisioning for `void2-db` (Postgres 16 + pgvector) and `void2-app`
+- Schema migrations 001-006 covering core, knowledge, resources, agents, cross-cutting, audit
+- Repos with capability-checked `actor` parameter and audit trail
+- Real audit log with redaction of sensitive keys (token, password, api_key, etc.)
+- `pending_changes` table for agent suggestions awaiting owner approval
+- Capability check module (allow / suggest / deny) for user vs agent actors
+- Owner-token bearer auth
+- Express server with `/health` and smoke `/api/spaces`
+- Test coverage: 72 tests across migrations, repos, capability, owner middleware, server