diff --git a/docs/scratchpads/828-lease-broker.md b/docs/scratchpads/828-lease-broker.md
index c356ec0..c7f9d83 100644
--- a/docs/scratchpads/828-lease-broker.md
+++ b/docs/scratchpads/828-lease-broker.md
@@ -66,6 +66,12 @@ Verified before code on session start; all exact SHA-256 values matched:
 - Exact-head Python product coverage: `90%` (`365` statements, `37` missed), above the required 85%.
 - Review-triggered oversized-frame race was fixed in production by bounded drain-to-EOF; tests were not changed.
 - Commits banked in red/green cadence: `d61c5441` (RED contract), `deb11df7` (GREEN implementation/docs), `57770e34` (oversized-frame production fix).
+- Final-review blocker remediated: added a 256-token pending-state cap, deletion on consume/generation revocation, pre-open serialized-size enforcement, and request-wide in-memory rollback for every broker mutation/commit failure while retaining the v1 live-token schema.
+- Distinct-principal docs now state built-in `0700`/`0600` is same-principal only; WI-1 does not provide the external identity-preserving proxy/ACL/service boundary needed for the stronger deployment.
+- Exact Python unit suite: `8/8` GREEN. Unrestricted focused acceptance: `35/35` GREEN.
+- Exact-head package build/suite: `71/71` files and `1,369/1,369` tests GREEN.
+- Exact-head Python product coverage: `90%` (`376` statements, `36` missed), above required 85%.
+- Root typecheck: `42/42` GREEN. Root lint: `23/23` GREEN. Root format check and `git diff --check`: GREEN.
 
 ## Coordinator handoff requirements