diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9d0216c..5fd91be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,13 +2,22 @@
 
 ## unreleased
 
-- add `paystable init` to generate local secrets into `.env` (no placeholders secrets).
-- installer runs `./paystable init` instead of copying `.env.example`.
-- improve `paystable doctor` with Environment/Database/Migrations sections and exact next commands.
-- explain local Postgres ident/peer auth failures in `paystable doctor`.
-- add `paystable doctor` for env, Postgres, and migration checks.
-- document local Postgres setup for binary installs.
-- harden webhook persistence, deduplication, and early-event handling.
-- align terminal-state handling with stable gateway observations.
-- add checksum verification to the installer and release artifacts.
-- add open-source contribution and security policy files.
+## v0.3.0 (2026-10-03)
+
+- add `paystable init` with generated secrets and private configuration permissions.
+- refuse to overwrite an existing configuration.
+- run `paystable init` from the installer.
+- improve `paystable doctor` with environment, database, and migration checks.
+- explain PostgreSQL connection and authentication errors.
+- serialize database migrations with a PostgreSQL advisory lock.
+- use the PayU `verify_payment` API with its request hash and nested response format.
+- read PayU amounts from `amt`, `transaction_amount`, or `amount`.
+- report invalid amounts and responses as errors.
+- treat PayU `Not Found` results as unresolved evidence.
+- reject conflicting duplicate hold requests.
+- send callbacks for manual review decisions and record them in the ledger.
+- build transaction timelines from stored evidence.
+- make dashboard configuration read-only and use backend data for counts.
+- restrict Docker dashboard access to host loopback and the configured bridge gateway.
+- check embedded dashboard assets in CI.
+- remove the unused hold scanner.