diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6384d63..bafc5fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,11 @@
 
 ## Unreleased
 
+- Replace the single validation workflow with CI jobs for dependencies,
+  formatting/vet, tests, CLI control-surface smoke checks, and GoReleaser
+  snapshot builds.
+- Add CodeQL analysis on pull requests, `main`, the crawlkit integration branch,
+  weekly schedule, and manual dispatch.
 - Depend on `github.com/vincentkoc/crawlkit v0.4.0` for shared config,
   status/control, snapshot, mirror, output, and terminal explorer mechanics.
 - Keep Notion API/Desktop parsing, Markdown rendering, page/comment/database
diff --git a/docs/distribution.md b/docs/distribution.md
index 97f0daf..1ec5296 100644
--- a/docs/distribution.md
+++ b/docs/distribution.md
@@ -19,6 +19,10 @@ notcrawl doctor --json
 notcrawl tui --json --limit 10
 ```
 
+The CI workflow runs the same control-surface smoke checks, plus dependency
+verification, `gofmt`, `go vet`, tests, a GoReleaser snapshot build, and
+CodeQL.
+
 If GoReleaser is installed:
 
 ```bash