diff --git a/CHANGELOG.md b/CHANGELOG.md
index c022435..d1bb8d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project are documented here. The format is based on
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Added
+- `wave webhook-subscriptions list|create` — manage the platform's own event-subscription
+  surface, distinct from `wave connect` third-party webhooks (#37).
+- `wave identity resolve <identifier>` — resolve an agent identity through the fleet directory
+  (#37).
 
 ## [1.0.9] - 2026-09-01
 
@@ -48,3 +53,24 @@ All notable changes to this project are documented here. The format is based on
 Publishing `@wave-av/cli@1.0.9` to npm is a separate, manual operator step. This change does
 not run `npm publish`. **Publish order matters less now** since this release pins the SDK to
 the already-published, working `2.0.14` rather than depending on the not-yet-published SDK fix.
+
+## [1.0.8] - 2026-08-04
+### Changed
+- License changed to Apache-2.0, replacing MIT. Adds a NOTICE reserving the WAVE trademarks. No
+  code or API changes (#5).
+- Repository history now contains the source for this version, rebuilt byte-identically from the
+  sourcemaps shipped in the published npm tarball (#18). Versions 1.0.1 through 1.0.7 were
+  published to the npm registry between 2026-04-02 and 2026-04-03 but were never committed to
+  this repository, so they have no individually dated section here; their recovered source
+  landed in this same commit.
+
+## [1.0.0] - 2026-04-05
+### Added
+- Initial public repository: README, LICENSE (MIT at the time), SECURITY.md.
+### Fixed
+- Corrected legal entity name to WAVE Online, LLC.
+
+[Unreleased]: https://github.com/wave-av/cli/compare/v1.0.9...HEAD
+[1.0.9]: https://github.com/wave-av/cli/compare/v1.0.8...v1.0.9
+[1.0.8]: https://github.com/wave-av/cli/compare/v1.0.0...v1.0.8
+[1.0.0]: https://github.com/wave-av/cli/releases/tag/v1.0.0