diff --git a/docs/SESSIONS.md b/docs/SESSIONS.md
index a378fb1bc..250f83149 100644
--- a/docs/SESSIONS.md
+++ b/docs/SESSIONS.md
@@ -750,3 +750,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-12T14:28:38Z | sage | decision 105, I1-1 agreed | Jason agreed Q102 via Mos sage-0074: containerize by role, two broker sockets, human socket only in the Console, no agent route or engine socket; host-side agent stays decision 95's limit; told Mos the brief works with a rootless daemon beside the rootful one, with conditions
 2026-10-12T14:46:53Z | sage | decision 106, I1-2 agreed | Jason agreed Q103 via Mos sage-0075 and installed the rootless packages, Mos set up the user units; Sage checked the endpoint read-only (rootless, cgroup v2, data root on /mnt/storage); brief pins it and fails closed without name=rootless
 2026-10-12T14:59:20Z | sage | decision 107, I1-3 deferred | Jason deferred Q104 via Mos sage-0077: no WebAuthn in the I1 brief; reopens only as a new question once containers run; a compromised Console holding human authority is recorded as open
+2026-10-12T15:00:59Z | sage | decision 108, I1-4 answered | Jason chose Q105 A via Mos sage-0078: subscription token as a read-only file secret per session container, no API key or gateway; copy-out risk accepted, bounded by the egress allowlist; all four I1 items answered, brief is Sage's on 2026-10-13