diff --git a/doc/plans/2026-10-12-claude-runner-default.md b/doc/plans/2026-10-12-claude-runner-default.md
index 1216508ea92..adb15fd8bb0 100644
--- a/doc/plans/2026-10-12-claude-runner-default.md
+++ b/doc/plans/2026-10-12-claude-runner-default.md
@@ -114,7 +114,9 @@ Update this record with the integrated source, package/image digests, preview, a
 
 ## Integrated implementation progress — 2026-10-15
 
-Master through `7f9d3d1929` is merged through the three PRs. Protocol is `56f8365a19c33825897fe6b9c23e0eb2e5958303`; behavior is `f1dfde5a097fee41cda53fdb9a44b61d6722bc7a`; frozen platform package source is `bd74bf50596d099e138bc6824cf0230f1026bfe1`. Existing Codex behavior and master's landed ARM SDK admission remain intact. GitHub workflow scope is verified; the cloud image consumer is published.
+Current checkpoint: all three integrated heads received 5/5 review with zero unresolved threads. Required source CI passed (the platform aggregate gate was finishing). The two latest master commits change retained-reader authorization batching and CI profile export; runner/Claude execution objects are unchanged from frozen package source bd74bf5059. The carry-forward receipt is `/private/tmp/claude-v7-runtime-carry-forward-20261015.json`; 267 authorization/selection controls and 15 CI profile tests pass. The existing Darwin SSH automatic-Legacy safeguard is also included in the behavior boundary, so Apple Silicon SSH creation is safe before the platform PR; its 142 selection tests pass. This moves an already-qualified guard earlier without changing the final platform implementation.
+
+Master through `7420af26fc9a80d6252ababd879e2fc991eebd07` is merged through the three PRs. Protocol is `bffac456ddb2ea6c340a8f598af10c6b98135625`; the corresponding reviewed behavior/platform heads are `9e3dac873bbf672d6f84eb5ba388cf837412767c` and `75f5cb820e4fd63d1cbcbbd6f67bdc1972465564`. Frozen platform package source remains `bd74bf50596d099e138bc6824cf0230f1026bfe1`. Existing Codex behavior and master's landed ARM SDK admission remain intact. GitHub workflow scope is verified; the cloud image consumer is published.
 
 Review corrections are committed and covered by failing-before/passing-after controls. Discovery changes invalidate stale onboarding probes. Finish setup now saves the exact configuration admitted during qualification rather than rebuilding Legacy defaults from an older render. V7 native input retains prepared transport, constraints, and completion-only second turns. The latter regression reproduces `session cannot start another turn` before the fix. All 160 focused protocol/session tests, all 71 New Agent tests, 148 onboarding tests, UI typecheck, and runner TypeScript build pass. Earlier focused verification also passed 343 selection/configuration checks, 849 skills/comment/native-session checks, 320 latest-master lifecycle/selection/snapshot checks, 148 platform-selection controls, 114 release controls, 16 image-consumer controls and token gates. Master's subsequently landed snapshot-worker test fix replaces the earlier local timeout change. All three heads have fresh 5/5 reviews with zero unresolved findings and passing required CI. One platform shard hit an ephemeral HTTP/2 EADDRINUSE test-port collision in unchanged code; a single provider-free rerun passed, preserving the original failure log at `/private/tmp/claude-v7-platform-workspaces-b-failure-20261015.log`. Final installed-package and remote execution gates remain pending.