diff --git a/CHANGELOG.md b/CHANGELOG.md
index bfc6010..9a901c4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,11 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
   repository, and "No warranty"; the runtime image ships `LICENSE` and
   `NOTICE` under `/usr/share/doc/selfpost/`. `docs/development.md` now lists
   the vendored htmx asset beside the Go module licences.
+- [docs/roadmap.md](docs/roadmap.md) — candidate item **visual-style** (panel
+  visual refresh: typography, colour tokens, spacing, and component styling
+  without behaviour changes). Starting reference:
+  [docs/assets/selfpost-proof.html](docs/assets/selfpost-proof.html). No semver
+  impact; explicit agreement required before coding, like other candidates.
 
 ## [1.0.1] - 2026-08-09
 
diff --git a/docs/roadmap.md b/docs/roadmap.md
index 5212c78..35e12b8 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -30,6 +30,7 @@ in `git log` and [CHANGELOG.md](../CHANGELOG.md).
 | domain-admin | Domain administrator role | **agreed** | [plans/domain-admin.md](plans/domain-admin.md) |
 | inbound-relay | Inbound relay (backup-MX / forwarding) | **agreed** | [plans/inbound-relay.md](plans/inbound-relay.md) |
 | contributing | `CONTRIBUTING.md` | candidate | — |
+| visual-style | Обновление визуального стиля | candidate | — |
 
 **Recommended order** (not binding): **web-split → domain-admin →
 inbound-relay** — first the package split, then role-wide authorisation, then
@@ -119,3 +120,25 @@ it.
 **Dependencies / risks:** with a single developer and no PRs, this is low
 priority.
 **Version:** no bearing on semver.
+
+---
+
+## visual-style
+
+**Goal:** refresh the control panel's visual design — typography, colour tokens,
+spacing, and component styling — without changing operator workflows or panel
+behaviour.
+
+**Boundary:** presentation only (`panel.css`, templates, static assets); no new
+features. Styling must stay compatible with the panel CSP — rules live in
+`panel.css`, not inline (see [security.md](security.md) and the stylesheet
+header).
+
+**Done when:** the panel reflects an agreed visual direction (starting
+reference: [assets/selfpost-proof.html](assets/selfpost-proof.html)); light and
+dark schemes remain supported; readability and contrast are preserved.
+
+**Dependencies / risks:** CSP constraints on how styles are applied; visual
+regression across pages; low priority relative to functional work — take up
+after explicit agreement, independently of the feature roadmap order.
+**Version:** no bearing on semver.