diff --git a/services/kilo-mcp/CHANGELOG.md b/services/kilo-mcp/CHANGELOG.md
index f19e9d631b..2217a8d09d 100644
--- a/services/kilo-mcp/CHANGELOG.md
+++ b/services/kilo-mcp/CHANGELOG.md
@@ -3,6 +3,410 @@
 Newest first: one section per production release that changed the deployed bundle. The kilo-mcp
 Release job in the Deploy to Production workflow writes each section. Do not edit this file by hand.
 
+## 2026-11-07 (cd27225)
+
+- No kilo-mcp pull request: a dependency update changed the deployed bundle.
+
+## 2026-11-07 (b7a2ebb)
+
+- fix(subscriptions): scope checkout session status to the organization ([#10142](https://github.com/Kilo-Org/cloud/pull/10142))
+
+## 2026-11-06 (02212c6)
+
+- feat(ai-gateway): bill Claude usage to a connected organization ([#9985](https://github.com/Kilo-Org/cloud/pull/9985))
+
+## 2026-11-06 (b482f5f)
+
+- fix(organizations): reject over-length invite email addresses ([#10161](https://github.com/Kilo-Org/cloud/pull/10161))
+
+## 2026-11-06 (f8b956b)
+
+- feat(auth): add Sign in with Claude ([#9984](https://github.com/Kilo-Org/cloud/pull/9984))
+
+## 2026-11-06 (8c72652)
+
+- fix(cloud-agent): honor selected model for slash commands ([#10126](https://github.com/Kilo-Org/cloud/pull/10126))
+
+## 2026-11-06 (8965e72)
+
+- feat(cloud-agent-next): add support for moving sessions between folders ([#10139](https://github.com/Kilo-Org/cloud/pull/10139))
+
+## 2026-11-06 (3c1e11b)
+
+- feat(web): let users scan and analyze their own session failures ([#6800](https://github.com/Kilo-Org/cloud/pull/6800))
+
+## 2026-11-06 (67095be)
+
+- feat(cloud-agent): show recent feedback history in the feedback dialog ([#6715](https://github.com/Kilo-Org/cloud/pull/6715))
+
+## 2026-11-06 (f56fd20)
+
+- feat(cloud-agent): delete sessions from history with resilient workspace cleanup ([#9997](https://github.com/Kilo-Org/cloud/pull/9997))
+
+## 2026-11-06 (5d8c3b1)
+
+- feat(cloud-agent): add built-in agent overrides ([#9741](https://github.com/Kilo-Org/cloud/pull/9741))
+
+## 2026-11-06 (4b2afd4)
+
+- fix(kilo-mcp): reclaim expired pending authorizations on create ([#10095](https://github.com/Kilo-Org/cloud/pull/10095))
+
+## 2026-11-06 (1028d12)
+
+- feat(guardrails): limit Enkrypt input guardrails for the alpha ([#10082](https://github.com/Kilo-Org/cloud/pull/10082))
+- feat(github): connect personal identity with a provided token ([#9917](https://github.com/Kilo-Org/cloud/pull/9917))
+
+## 2026-11-06 (f8a25e9)
+
+- refactor(cloud-agent): retire fully rolled out feature flags ([#9971](https://github.com/Kilo-Org/cloud/pull/9971))
+
+## 2026-11-05 (9159151)
+
+- feat(admin): require session-bound passkey step-up for admin access ([#9615](https://github.com/Kilo-Org/cloud/pull/9615))
+
+## 2026-11-05 (3a0599f)
+
+- fix(mobile): replay an accepted manual review start on retry ([#9399](https://github.com/Kilo-Org/cloud/pull/9399))
+
+## 2026-11-05 (fa32d6b)
+
+- [AISAGE-857] feat(byok): enable organization key priorities ([#9915](https://github.com/Kilo-Org/cloud/pull/9915))
+
+## 2026-11-05 (40a0c10)
+
+- feat(cloud-agent): add environment start commands ([#9811](https://github.com/Kilo-Org/cloud/pull/9811))
+
+## 2026-11-05 (6473612)
+
+- [AISAGE-733] feat(web): filter organization request logs and trim the table ([#9814](https://github.com/Kilo-Org/cloud/pull/9814))
+
+## 2026-11-04 (44dc1e4)
+
+- Show parent session navigation in Cloud Agent ([#9703](https://github.com/Kilo-Org/cloud/pull/9703))
+- fix(org): allow full-catalog group model selections ([#9804](https://github.com/Kilo-Org/cloud/pull/9804))
+
+## 2026-11-04 (4aa2ec7)
+
+- [AISAGE-733] feat(ai-gateway): add organization request logs page behind a gateway feature toggle ([#9779](https://github.com/Kilo-Org/cloud/pull/9779))
+
+## 2026-11-04 (2467baa)
+
+- feat(cloud-agent): callback to a workspace chat or a new chat ([#9728](https://github.com/Kilo-Org/cloud/pull/9728))
+
+## 2026-11-04 (a78f1aa)
+
+- [AISAGE-811] feat(ai-gateway): add opt-in Enkrypt output guardrail ([#9759](https://github.com/Kilo-Org/cloud/pull/9759))
+
+## 2026-11-04 (b980f85)
+
+- [AISAGE-871] feat(ai-gateway): organization feature toggles and organization gateway settings ([#9296](https://github.com/Kilo-Org/cloud/pull/9296))
+
+## 2026-11-04 (d63f10e)
+
+- refactor(cloud-agent): remove legacy Cloudflare sandbox runtime ([#9689](https://github.com/Kilo-Org/cloud/pull/9689))
+
+## 2026-11-04 (acaa77c)
+
+- No kilo-mcp pull request: a dependency update changed the deployed bundle.
+
+## 2026-11-04 (4dcb7de)
+
+- feat(cloud-agent): add environment network controls ([#8899](https://github.com/Kilo-Org/cloud/pull/8899))
+
+## 2026-11-03 (a323901)
+
+- [AISAGE-857] feat(byok): route BYOK requests by the user's key priority ([#9161](https://github.com/Kilo-Org/cloud/pull/9161))
+- feat(cloud-agent): add multi-repository environments ([#9155](https://github.com/Kilo-Org/cloud/pull/9155))
+
+## 2026-11-03 (ae7c120)
+
+- feat(mcp): add dedicated subagent tools, model discovery, and folders ([#9606](https://github.com/Kilo-Org/cloud/pull/9606))
+- feat(cloud-agent): add observation-only Watch PR pilot ([#7592](https://github.com/Kilo-Org/cloud/pull/7592))
+
+## 2026-11-03 (a86d6f6)
+
+- fix(security-agent): accept only whole numbers for SLA days and pagination ([#9666](https://github.com/Kilo-Org/cloud/pull/9666))
+
+## 2026-11-02 (8755416)
+
+- feat(cloud-agent): enable workspace MCP and child lifecycle controls ([#9395](https://github.com/Kilo-Org/cloud/pull/9395))
+
+## 2026-11-02 (eabc832)
+
+- feat(cloud-agent): support custom agents in webhook and scheduled triggers ([#9524](https://github.com/Kilo-Org/cloud/pull/9524))
+- [AISAGE-862] feat(byok): add Cohere provider through Vercel AI Gateway ([#9569](https://github.com/Kilo-Org/cloud/pull/9569))
+
+## 2026-11-02 (e1bc879)
+
+- feat(cloud-agent): add independent bounded egress auditing ([#7608](https://github.com/Kilo-Org/cloud/pull/7608))
+
+## 2026-11-01 (bc4cd71)
+
+- refactor(code-reviews): let connected carry the reviewer connection state ([#9447](https://github.com/Kilo-Org/cloud/pull/9447))
+
+## 2026-10-30 (c94e7ec)
+
+- fix(kilo-mcp): delete expired pending authorizations in bounded batches ([#9260](https://github.com/Kilo-Org/cloud/pull/9260))
+
+## 2026-10-30 (a5a769f)
+
+- fix(kilo-mcp): bound the token endpoint form body ([#9269](https://github.com/Kilo-Org/cloud/pull/9269))
+
+## 2026-10-30 (7bde61d)
+
+- fix(moderation): declare maximum lengths for moderation report metadata ([#9254](https://github.com/Kilo-Org/cloud/pull/9254))
+
+## 2026-10-29 (a50d1ea)
+
+- fix(cloud-agent-profile): apply environment variable updates as a set ([#9213](https://github.com/Kilo-Org/cloud/pull/9213))
+
+## 2026-10-29 (44a461d)
+
+- fix(mobile): read each profile section on its own ([#9208](https://github.com/Kilo-Org/cloud/pull/9208))
+
+## 2026-10-29 (2ccc833)
+
+- feat(web): add AI guardrails for MCP servers and skills with an MCP audit log ([#9150](https://github.com/Kilo-Org/cloud/pull/9150))
+
+## 2026-10-29 (b3ba4ee)
+
+- fix(mobile): read profile counts for the overview ([#9089](https://github.com/Kilo-Org/cloud/pull/9089))
+- feat(agent-briefing)!: generate scheduled snapshot digests ([#9076](https://github.com/Kilo-Org/cloud/pull/9076))
+- [AISAGE-774] feat(byok): preview the routes a catalog model takes with the owner's keys ([#9098](https://github.com/Kilo-Org/cloud/pull/9098))
+- feat(cloud-agent): separate uncommitted and base branch diffs ([#7503](https://github.com/Kilo-Org/cloud/pull/7503))
+
+## 2026-10-28 (ebf5c14)
+
+- [AISAGE-774] feat(byok): serve Kilo catalog model ids through direct BYOK keys in catalog mode ([#8918](https://github.com/Kilo-Org/cloud/pull/8918))
+
+## 2026-10-28 (3cacdb4)
+
+- [AISAGE-745] feat(ai-gateway): PoC direct Bedrock and Vertex AI BYOK ([#8488](https://github.com/Kilo-Org/cloud/pull/8488))
+- [AISAGE-818] chore(ai-gateway): derive direct BYOK provider ids from a single list ([#9042](https://github.com/Kilo-Org/cloud/pull/9042))
+
+## 2026-10-28 (60f1c8d)
+
+- [AISAGE-812] feat(ai-gateway): support user OpenRouter and Vercel AI Gateway BYOK keys ([#7167](https://github.com/Kilo-Org/cloud/pull/7167))
+
+## 2026-10-28 (392638a)
+
+- feat(ai-gateway): organization-configured Enkrypt input guardrails ([#8969](https://github.com/Kilo-Org/cloud/pull/8969))
+
+## 2026-10-28 (42d9570)
+
+- feat(cloud-agent): enable child session launches for interactive sessions ([#8987](https://github.com/Kilo-Org/cloud/pull/8987))
+
+## 2026-10-27 (339b348)
+
+- feat(cloud-agent): install skills.sh skills from profiles ([#8502](https://github.com/Kilo-Org/cloud/pull/8502))
+
+## 2026-10-27 (14caa33)
+
+- [AISAGE-707] feat(ai-gateway): configure custom pricing from the admin gateway screen ([#8926](https://github.com/Kilo-Org/cloud/pull/8926))
+
+## 2026-10-27 (98c33f0)
+
+- fix(cloud-agent-profile): bound Kilo command reorder input and apply order in one update ([#8826](https://github.com/Kilo-Org/cloud/pull/8826))
+
+## 2026-10-26 (52dd4e3)
+
+- feat(billing): expire new paid credits one year after purchase ([#7609](https://github.com/Kilo-Org/cloud/pull/7609))
+
+## 2026-10-26 (f2ef0ed)
+
+- refactor(cloud-agent): send attachments through the pending-upload ledger ([#8885](https://github.com/Kilo-Org/cloud/pull/8885))
+- fix(kilo-mcp): bound search query length and add a per-account allowance ([#8810](https://github.com/Kilo-Org/cloud/pull/8810))
+- fix(session-ingest-contracts): bound session history cursor sizes ([#8217](https://github.com/Kilo-Org/cloud/pull/8217))
+- feat(cloud-agent): add BYOC Vercel compute ([#8859](https://github.com/Kilo-Org/cloud/pull/8859))
+
+## 2026-10-26 (d12ad6d)
+
+- feat(cloud-agent): build reusable environment snapshots ([#8886](https://github.com/Kilo-Org/cloud/pull/8886))
+
+## 2026-10-25 (31fbe61)
+
+- fix(cloud-agent): link attachment rows before dispatch and require the client message id ([#8585](https://github.com/Kilo-Org/cloud/pull/8585))
+
+## 2026-10-25 (c2eb6d7)
+
+- fix(mobile): prepare agent briefs in the background and correct translations ([#8864](https://github.com/Kilo-Org/cloud/pull/8864))
+
+## 2026-10-24 (93a9111)
+
+- fix(kilo-mcp): require the confirmed client for a device pairing ([#8534](https://github.com/Kilo-Org/cloud/pull/8534))
+- fix(webhooks): allow organization admins to manage triggers ([#8880](https://github.com/Kilo-Org/cloud/pull/8880))
+
+## 2026-10-24 (dd07641)
+
+- feat(cloud-agent): add automatic repository environments ([#8678](https://github.com/Kilo-Org/cloud/pull/8678))
+- fix(cloud-agent): bound attachment uploads per account and finalize them server-side ([#8012](https://github.com/Kilo-Org/cloud/pull/8012))
+
+## 2026-10-24 (6d0126a)
+
+- feat(notifications): record push history and expose it over tRPC ([#8567](https://github.com/Kilo-Org/cloud/pull/8567))
+
+## 2026-10-24 (f2aa10b)
+
+- feat(webhooks): support optional profiles and body validation ([#8858](https://github.com/Kilo-Org/cloud/pull/8858))
+
+## 2026-10-24 (21c3a2a)
+
+- fix(usage-analytics): bound dimension filter arrays and values ([#8697](https://github.com/Kilo-Org/cloud/pull/8697))
+
+## 2026-10-24 (3fb659e)
+
+- refactor(code-indexing): drop unused recent searches listing ([#7987](https://github.com/Kilo-Org/cloud/pull/7987))
+
+## 2026-10-23 (0caddd6)
+
+- fix(cloud-agent-next): bound execution payload text fields ([#8588](https://github.com/Kilo-Org/cloud/pull/8588))
+- fix(feedback): format Slack feedback notifications with escaped fields ([#8243](https://github.com/Kilo-Org/cloud/pull/8243))
+
+## 2026-10-23 (1b00f74)
+
+- fix(kilo-mcp): bind the consent flow to the starting browser and gate the enrollment secret behind an explicit action ([#8050](https://github.com/Kilo-Org/cloud/pull/8050))
+
+## 2026-10-23 (1568126)
+
+- build(deps): move the test runner to vitest 5 ([#8214](https://github.com/Kilo-Org/cloud/pull/8214))
+
+## 2026-10-22 (2495507)
+
+- fix(github): pin pending installation selection and cancel to one request ([#8570](https://github.com/Kilo-Org/cloud/pull/8570))
+
+## 2026-10-22 (77f5f95)
+
+- build(deps): move the typescript catalog to 7.0.2 ([#8519](https://github.com/Kilo-Org/cloud/pull/8519))
+- Update shared-session lifecycle ([#8280](https://github.com/Kilo-Org/cloud/pull/8280))
+
+## 2026-10-22 (7c845be)
+
+- fix(kilo-mcp): name the OAuth failure cause and record reuse revocations ([#8636](https://github.com/Kilo-Org/cloud/pull/8636))
+
+## 2026-10-22 (26c2bfa)
+
+- refactor(github-pr-review): share the comment builders and validate replayed ledger results ([#8612](https://github.com/Kilo-Org/cloud/pull/8612))
+
+## 2026-10-22 (01f6791)
+
+- chore(code-indexing): retire cloud managed indexing ([#8474](https://github.com/Kilo-Org/cloud/pull/8474))
+
+## 2026-10-22 (16c04c1)
+
+- fix(kilo-mcp): prune vectors from the previous catalog, not an index list ([#8611](https://github.com/Kilo-Org/cloud/pull/8611))
+- feat(mobile): add one-off agent briefings ([#8303](https://github.com/Kilo-Org/cloud/pull/8303))
+- chore(app-builder): remove app builder and kilo deploys ([#8317](https://github.com/Kilo-Org/cloud/pull/8317))
+
+## 2026-10-22 (6a9e552)
+
+- fix(kilo-mcp): watch router schema inputs and prune stale vectors ([#8603](https://github.com/Kilo-Org/cloud/pull/8603))
+- refactor(cloud-agent): remove the legacy session plane ([#8406](https://github.com/Kilo-Org/cloud/pull/8406))
+- [AISAGE-760] feat(inference-providers): graduate gmicloud to user BYOK ([#8609](https://github.com/Kilo-Org/cloud/pull/8609))
+
+## 2026-10-22 (cecfdc7)
+
+- build(deps): upgrade the oxlint toolchain to 1.88 ([#8218](https://github.com/Kilo-Org/cloud/pull/8218))
+- feat(webhooks): support Cloud Agent sandbox selection ([#8455](https://github.com/Kilo-Org/cloud/pull/8455))
+
+## 2026-10-22 (6a4b06d)
+
+- feat(webhooks): run organization triggers as their creator ([#8423](https://github.com/Kilo-Org/cloud/pull/8423))
+
+## 2026-10-21 (637ac1b)
+
+- build(deps): bump zod catalog to 4.6.7 ([#8207](https://github.com/Kilo-Org/cloud/pull/8207))
+
+## 2026-10-21 (a5ac8d3)
+
+- feat(cloud-agent): parent-scoped session launches through Kilo MCP ([#7506](https://github.com/Kilo-Org/cloud/pull/7506))
+- feat(cloud-agent): notify parent sessions when child tasks finish ([#8306](https://github.com/Kilo-Org/cloud/pull/8306))
+
+## 2026-10-21 (0a62b84)
+
+- fix(feedback): prevent Slack link and mention injection ([#8398](https://github.com/Kilo-Org/cloud/pull/8398))
+
+## 2026-10-20 (77d05e3)
+
+- feat(cloud-agent): dev public-repo sessions + sandbox memory bound ([#7604](https://github.com/Kilo-Org/cloud/pull/7604))
+
+## 2026-10-20 (3eea7f7)
+
+- feat(cloud-agent-next): rebuild chat state from local and server-prefetched data ([#8145](https://github.com/Kilo-Org/cloud/pull/8145))
+- Simplify webhook request actions and session cleanup ([#8176](https://github.com/Kilo-Org/cloud/pull/8176))
+
+## 2026-10-19 (2d93713)
+
+- chore/remove mcp gateway code ([#8156](https://github.com/Kilo-Org/cloud/pull/8156))
+
+## 2026-10-19 (0a72abd)
+
+- chore/remove autotriage code ([#8151](https://github.com/Kilo-Org/cloud/pull/8151))
+
+## 2026-10-19 (d6d54b4)
+
+- chore(auto-fix): remove auto-fix service code ([#8135](https://github.com/Kilo-Org/cloud/pull/8135))
+
+## 2026-10-19 (02c3340)
+
+- feat(mobile): add morning briefings for overnight agent activity ([#7602](https://github.com/Kilo-Org/cloud/pull/7602))
+
+## 2026-10-19 (4391cab)
+
+- fix(byok): show BYOK only for keys a shared-services run can use ([#7819](https://github.com/Kilo-Org/cloud/pull/7819))
+
+## 2026-10-16 (c2bfe29)
+
+- feat(billing): configurable org auto top-up threshold and $5,000 amount ([#7612](https://github.com/Kilo-Org/cloud/pull/7612))
+
+## 2026-10-15 (9039346)
+
+- feat(cloud-agent-profile): import local Kilo configuration ([#7553](https://github.com/Kilo-Org/cloud/pull/7553))
+
+## 2026-10-15 (6ae1721)
+
+- fix(branding): match Anaconda hover and remaining Kilo yellows ([#7561](https://github.com/Kilo-Org/cloud/pull/7561))
+
+## 2026-10-14 (f6c53fe)
+
+- feat(cloud-agent-next): preview dev servers in workspace sandboxes ([#7505](https://github.com/Kilo-Org/cloud/pull/7505))
+
+## 2026-10-14 (5bf3c20)
+
+- feat(cloud-agent): add API-only sandbox egress allowlists ([#7509](https://github.com/Kilo-Org/cloud/pull/7509))
+
+## 2026-10-13 (f6cf3b5)
+
+- feat(mobile): in-app to-do lists linked to agent sessions ([#7449](https://github.com/Kilo-Org/cloud/pull/7449))
+- feat(mobile): iOS per-session Live Activity ([#7434](https://github.com/Kilo-Org/cloud/pull/7434))
+
+## 2026-10-13 (d3b16ee)
+
+- feat(mobile): view a session's file changes from the details sheet ([#7438](https://github.com/Kilo-Org/cloud/pull/7438))
+
+## 2026-10-13 (8d424cc)
+
+- feat(mobile): fork a session from a message ([#7440](https://github.com/Kilo-Org/cloud/pull/7440))
+
+## 2026-10-13 (de204ce)
+
+- feat(cloud-agent): configure default sandboxes per owner and repo ([#7467](https://github.com/Kilo-Org/cloud/pull/7467))
+
+## 2026-10-12 (58a2cf1)
+
+- fix(web): accept relaxed attachment filenames when a message is sent ([#7352](https://github.com/Kilo-Org/cloud/pull/7352))
+
+## 2026-10-11 (ef73f37)
+
+- feat(mobile): keep Home widgets current and redesign every size ([#7324](https://github.com/Kilo-Org/cloud/pull/7324))
+
+## 2026-10-10 (ec903ec)
+
+- feat(mobile): rebuild the chat tab on the harness SDK ([#5895](https://github.com/Kilo-Org/cloud/pull/5895))
+
+## 2026-10-08 (764a890)
+
+- refactor(mobile): remove in-app Kilo Pass subscription purchase code ([#7304](https://github.com/Kilo-Org/cloud/pull/7304))
+
 ## 2026-10-08 (2ab59b0)
 
 - No kilo-mcp pull request: a dependency update changed the deployed bundle.