diff --git a/CHANGELOG.md b/CHANGELOG.md
index 61cb1ff..fd2f135 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@ All notable changes to Reflex Control are documented here.
 
 - Added prebuilt release binaries and one-line installers. A `v*` tag now builds `reflex` for Linux (x86_64, aarch64), macOS (Intel, Apple Silicon) and Windows (x86_64) and publishes archives with SHA-256 checksums; `install.sh` (macOS/Linux) and `install.ps1` (Windows) download, verify and install the right one without Rust. See `docs/releasing.md`.
 - Added agent hooks: `reflex install` (interactive setup wizard), `reflex uninstall` and `reflex doctor`, plus a `reflex hook <agent> <event>` entry point. Targets are Claude Code (`PreToolUse` and `Stop` hooks) and a generic git pre-commit hook. Hooks block writes to protected paths, ask before risky shell commands, run the project's tests when the agent stops and send failures back for a limited number of retries. Settings live in `.reflex.toml`. Hook mode uses deterministic evidence only; see `docs/agent-hooks.md`. New crate `reflex-hooks`; new dependencies `toml`, `globset`, `dirs` and `cliclack`.
+- Added Cursor (`.cursor/hooks.json`) and Codex CLI (`.codex/hooks.json`) hook adapters for `reflex install`: writes to protected paths are denied, risky shell commands ask first in Cursor and are denied with a reason in Codex (which has no ask), and failing tests at the end of a turn are sent back for a limited number of retries. See `docs/agent-hooks.md`.
 - `reflex run` now rejects an unrecognised `--risk` value instead of silently treating it as `low`, which would have skipped the mandatory High/Critical gate on a typo.
 - README no longer says telemetry writes never block execution; they are synchronous SQLite writes.
 - Added `examples/agent-runtime-gate`, mapping a runtime-style task result to Accept / Retry / Escalate offline.