diff --git a/changelog.mdx b/changelog.mdx
index 3bbc56d..07bd1ad 100644
--- a/changelog.mdx
+++ b/changelog.mdx
@@ -7,6 +7,16 @@ description: "Stay up to date with the latest agentsfleet product updates, new f
agentsfleet is in **stealth-mode testing** and pre-production. APIs and agent behavior may change between releases without long deprecation windows. Email [agentsfleet@agentmail.to](mailto:agentsfleet@agentmail.to) if you want a hand calibrating an agent or to join as a design partner.
+
+ ## A revoked integration grant stays revoked
+
+ Revoking a grant only ever wrote to the grant itself — it had no reason to know about the fleet's approval gate. A gate raised before the revoke and left unanswered was still pending, and resolving it later, even as an ordinary approval, matched the grant by fleet and service alone with no check on its current status. The revoke was silently reversed, with no error and no record that it happened.
+
+ ## Security
+
+ - **A stale gate can no longer resurrect a revoked grant.** Gate resolution now leaves an already-revoked grant alone, whatever decision the gate carries. Re-authorizing a service goes back through the install flow, which raises a fresh gate.
+
+
## `--provider` is checked against the model catalogue your server serves
diff --git a/docs.json b/docs.json
index d23f2f6..8320ea1 100644
--- a/docs.json
+++ b/docs.json
@@ -219,7 +219,9 @@
"GET /v1/workspaces/{workspace_id}/connectors",
"POST /v1/workspaces/{workspace_id}/connectors/{provider}/connect",
"GET /v1/workspaces/{workspace_id}/connectors/{provider}",
+ "DELETE /v1/workspaces/{workspace_id}/connectors/{provider}",
"GET /v1/connectors/{provider}/callback",
+ "POST /v1/connectors/{provider}/callback",
"POST /v1/connectors/slack/events"
]
},