diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 969a63d..b7e1f86 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.84.0"
+  ".": "0.85.0"
 }
diff --git a/.stats.yml b/.stats.yml
index 748759e..e1475ca 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1,4 +1,4 @@
 configured_endpoints: 127
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-904fd6fd50970ea07ec05c51b1ae0819ffb64cbf0921fff9daed6792b64f1dc9.yml
-openapi_spec_hash: cbd6626bdac7beaa768abb346e03fb74
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/kernel/kernel-7b03462454d6fa8390eaebc1b411d3e160501bf96abb93b75d38dfc382d4ce51.yml
+openapi_spec_hash: ba55400aafb4759cc06ec139fe528dfc
 config_hash: 77ee715aa17061166f9a02b264a21b8d
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 806de83..e467fc5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.85.0 (2026-07-29)
+
+Full Changelog: [v0.84.0...v0.85.0](https://github.com/kernel/kernel-node-sdk/compare/v0.84.0...v0.85.0)
+
+### Features
+
+* Add encrypted per-proxy CA bundle for BYO MITM proxies ([ea6d146](https://github.com/kernel/kernel-node-sdk/commit/ea6d146df79b2771a6ea633aff9c0ba7a249af55))
+* Stabilize project lifecycle error codes ([ffe3238](https://github.com/kernel/kernel-node-sdk/commit/ffe32383fc01a2e79280ea52cd315d7dc3610f6e))
+
 ## 0.84.0 (2026-07-27)
 
 Full Changelog: [v0.83.0...v0.84.0](https://github.com/kernel/kernel-node-sdk/compare/v0.83.0...v0.84.0)
diff --git a/package.json b/package.json
index 5e4502c..556710c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@onkernel/sdk",
-  "version": "0.84.0",
+  "version": "0.85.0",
   "description": "The official TypeScript library for the Kernel API",
   "author": "Kernel <>",
   "types": "dist/index.d.ts",
diff --git a/src/client.ts b/src/client.ts
index 1b9a833..ff09dd2 100644
--- a/src/client.ts
+++ b/src/client.ts
@@ -1023,6 +1023,9 @@ export class Kernel {
   credentials: API.Credentials = new API.Credentials(this);
   /**
    * Create and manage projects for resource isolation within an organization.
+   * When projects are disabled for the organization, project operations return
+   * `404` with code `projects_disabled`.
+   *
    */
   projects: API.Projects = new API.Projects(this);
   organization: API.Organization = new API.Organization(this);
diff --git a/src/resources/projects/limits.ts b/src/resources/projects/limits.ts
index d1a3e53..8457373 100644
--- a/src/resources/projects/limits.ts
+++ b/src/resources/projects/limits.ts
@@ -7,6 +7,8 @@ import { path } from '../../internal/utils/path';
 
 /**
  * Create and manage projects for resource isolation within an organization.
+ * When projects are disabled for the organization, project operations return
+ * `404` with code `projects_disabled`.
  */
 export class Limits extends APIResource {
   /**
diff --git a/src/resources/projects/projects.ts b/src/resources/projects/projects.ts
index 0480b72..a712420 100644
--- a/src/resources/projects/projects.ts
+++ b/src/resources/projects/projects.ts
@@ -11,6 +11,8 @@ import { path } from '../../internal/utils/path';
 
 /**
  * Create and manage projects for resource isolation within an organization.
+ * When projects are disabled for the organization, project operations return
+ * `404` with code `projects_disabled`.
  */
 export class Projects extends APIResource {
   limits: LimitsAPI.Limits = new LimitsAPI.Limits(this._client);
diff --git a/src/resources/proxies.ts b/src/resources/proxies.ts
index 28c592c..0ccef51 100644
--- a/src/resources/proxies.ts
+++ b/src/resources/proxies.ts
@@ -255,6 +255,11 @@ export namespace ProxyCreateResponse {
      */
     port: number;
 
+    /**
+     * Whether the proxy has a custom CA bundle configured.
+     */
+    has_ca_bundle?: boolean;
+
     /**
      * Whether the proxy has a password.
      */
@@ -411,6 +416,11 @@ export namespace ProxyRetrieveResponse {
      */
     port: number;
 
+    /**
+     * Whether the proxy has a custom CA bundle configured.
+     */
+    has_ca_bundle?: boolean;
+
     /**
      * Whether the proxy has a password.
      */
@@ -567,6 +577,11 @@ export namespace ProxyUpdateResponse {
      */
     port: number;
 
+    /**
+     * Whether the proxy has a custom CA bundle configured.
+     */
+    has_ca_bundle?: boolean;
+
     /**
      * Whether the proxy has a password.
      */
@@ -723,6 +738,11 @@ export namespace ProxyListResponse {
      */
     port: number;
 
+    /**
+     * Whether the proxy has a custom CA bundle configured.
+     */
+    has_ca_bundle?: boolean;
+
     /**
      * Whether the proxy has a password.
      */
@@ -879,6 +899,11 @@ export namespace ProxyCheckResponse {
      */
     port: number;
 
+    /**
+     * Whether the proxy has a custom CA bundle configured.
+     */
+    has_ca_bundle?: boolean;
+
     /**
      * Whether the proxy has a password.
      */
@@ -1015,6 +1040,13 @@ export namespace ProxyCreateParams {
      */
     port: number;
 
+    /**
+     * PEM-encoded CA certificate bundle the proxy re-signs upstream TLS with. Provide
+     * when the proxy terminates TLS (MITM) so the browser trusts its certificates. May
+     * contain multiple concatenated certificates.
+     */
+    ca_bundle?: string;
+
     /**
      * Password for proxy authentication.
      */
diff --git a/src/version.ts b/src/version.ts
index 622cca1..2e21901 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.84.0'; // x-release-please-version
+export const VERSION = '0.85.0'; // x-release-please-version
diff --git a/yarn.lock b/yarn.lock
index 1638a8a..a1f879c 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1235,9 +1235,9 @@ baseline-browser-mapping@^2.9.0:
   integrity sha512-B0xUquLkiGLgHhpPBqvl7GWegWBUNuujQ6kXd/r1U38ElPT6Ok8KZ8e+FpUGEc2ZoRQUzq/aUnaKFc/svWUGSg==
 
 brace-expansion@^2.0.2:
-  version "2.1.2"
-  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.1.2.tgz#0bba2271feb7d458b0d31ad13625aaa4754431e2"
-  integrity sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==
+  version "2.1.3"
+  resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-2.1.3.tgz#1bf69aacdf6a4380ca17c284d9f928d4aa6401bc"
+  integrity sha512-DRdx5neNsG/QXbniLFWi2YmC/68oeOOmKz6zOjVk6ZS1ZLXgLIKqVEc6hWsmkjBbgii0SwaBTcJ5XKj5gzY/4A==
   dependencies:
     balanced-match "^1.0.0"