diff --git a/changelog.md b/changelog.md
index 1b53aef..74b9f8c 100644
--- a/changelog.md
+++ b/changelog.md
@@ -14,6 +14,7 @@ A `### Breaking` section is used in addition to Keep a Changelog's standard sect
 ### Added
 
 - CI validation now runs `gosec` and `govulncheck` security scanning on push and pull request workflows.
+- `cmd/homesick` now includes entrypoint-focused tests that exercise both the CLI run path and `main` process path.
 - `rc` command: executes all executable scripts inside a castle's `.homesick.d/` directory in sorted order, with the castle root as the working directory. stdout/stderr from each script is forwarded to the caller.
 - `rc` command: when a `.homesickrc` file exists and no `parity.rb` wrapper is present in `.homesick.d/`, a Ruby wrapper script (`parity.rb`) is generated automatically to preserve backwards compatibility. An existing `parity.rb` is never overwritten.
 - `exec` command: runs a shell command inside the target castle root directory.
@@ -35,6 +36,7 @@ A `### Breaking` section is used in addition to Keep a Changelog's standard sect
 ### Changed
 
 - Release automation now uses `aether/vociferate` `prepare` and `publish` actions (pinned to `v1.0.0`) instead of repository-local releaseprep wrappers.
+- Push and pull request validation now enforce per-package coverage gates (fail below 50%) and publish package-level coverage status tables in workflow summaries.
 - CLI argument parsing migrated to Kong.
 - Git operations for clone and track migrated to `go-git`.
 - Build and behavior workflows now produce and run the `gosick` binary name.