From c77fc65c1f6d5409740a6c21ce27417148d4720a Mon Sep 17 00:00:00 2001
From: Hermes <hermes@nousagent.com>
Date: Thu, 25 Jun 2026 15:47:25 -0700
Subject: [PATCH] =?UTF-8?q?DC-009:=20mark=20done=20=E2=80=94=20[Unreleased?=
 =?UTF-8?q?]=20populated=20with=2030+=20entries=20since=20v1.5.0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 BACKLOG.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/BACKLOG.md b/BACKLOG.md
index 1846804..fa547d0 100644
--- a/BACKLOG.md
+++ b/BACKLOG.md
@@ -69,9 +69,10 @@
 - **details:** CLAUDE.md references Windows-specific paths (C:/caddy/, e:/CaddyCerts/) as if they're universal. DashCaddy runs on Linux (Docker on DNS2) and Windows (SAMI-PC). Document both deployment targets clearly.
 
 ### DC-009: Add CHANGELOG entry for any unreleased work
-- **status:** todo
-- **owner:** 
+- **status:** done
+- **owner:** hermes
 - **details:** `[Unreleased]` section in CHANGELOG.md is empty. Any fixes done should be documented there before tagging a release.
+- **result:** Populated the `[Unreleased]` section with all unreleased work since v1.5.0: Security (TOTP 4-part recovery), Added (OpenClaw routes, auto-backup, monitoring widget, Sami Files template, unified logger, notification manager, update UX, 120 new tests across 7 files), Changed (DC-010 response standardization across 9 route files, /api/v1/ versioning, release.sh hardening), Fixed (DC-011 credential route regression, DC-004 ESLint cleanup, workflow engine init, container-logs wireModal misuse, CSP hash mismatch, SW cache tag, updater false-positive loop), Removed (legacy test scripts moved to scripts/legacy/ preserved-not-deleted, stale root files, dead routes/ directory). Each entry cites the source commit hash for traceability.
 
 ### DC-010: Standardize error response shapes
 - **status:** done