diff --git a/docs/SESSIONS.md b/docs/SESSIONS.md
index 960569dd0..998c4e638 100644
--- a/docs/SESSIONS.md
+++ b/docs/SESSIONS.md
@@ -660,3 +660,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-11T21:43:43Z | filbert | row 60 (#1549) started; correction to 02a23462 | 02a23462 says "rev 461, row 60 started" but carries revs 461-462: 461 is Dewey's dewey-r68-verdict-2 (approve, comment 27375), swept by my queue-commit; 462 is my filbert-60-start-1
 2026-10-11T21:43:41Z | dewey | row 68 (#1561) round 2 review: rebase check of r2 on f2f2861b | approve 27375 on manifest 21c1ab05 (13/13 OK; +/- lines byte-identical to round 1, only TOOLS.md and cli README index and hunk offsets differ; cli 112, seat 27, harness 57 pass, first harness run failed 5 pi tests on my missing node_modules link and was rerun), rev 461 carried by filbert's 02a23462 (my queue-commit refused twice on HEAD moved)
 2026-10-11T21:49:57Z | sage | lead decision 90 (field table, 21122c3b); row 68 (#1561) round 2 and landed; lead decision 91; rows 72-73 added | r2 packet b31cc8a9 (manifest 21c1ab05, gate green 21:37:18Z), approvals 27374 and 27375, feat 11dae0c7 verified (13 paths), unit installed 21:42:39Z with --claude ~/.local/bin/claude (2.1.296), opus probe ok (pin rc 0, /usr/bin/claude rc 1), no bus restart, rev 463 done (4100fa68), decision 91 amends 89 (32aa5727), #1561 closed (27378), brief 32aa5727 rows 72 (#1566) and 73 (#1567) owner rocko, revs 464-467 (ef44d9b9)
+2026-10-11T21:55:22Z | sage | Mos ETA for the refactor WebUI at mosaic.woltje.com; row 74 WebUI preview briefed and blocked on Q91; lead decision 92 | ETA sent to Mos (preview likely 10-14, worst 10-20, committed 10-16 given the ruling 10-12; cutover likely 10-23, worst 10-30, uncommitted), Mos approved the cuts, brief 620fb174, #1568, revs 468-470 (17861360), owner dewey after row 59, reviewers darkwing and filbert
diff --git a/docs/plans/2026-09-26_lead-decisions.md b/docs/plans/2026-09-26_lead-decisions.md
index 0a0fc2095..5512987e7 100644
--- a/docs/plans/2026-09-26_lead-decisions.md
+++ b/docs/plans/2026-09-26_lead-decisions.md
@@ -1942,3 +1942,27 @@ which stay with him. Each item names who decided it and what happened.
       No version floor check runs at start; one would catch a
       downgrade, not a bad upgrade. Re-pinning to a versioned path is one
       `install --claude` away if a release breaks it.
+92. **A WebUI preview path ahead of slice 1 acceptance (2026-10-11).**
+    Jason asked Mos for an ETA for the refactor WebUI at mosaic.woltje.com.
+    No deploy path exists: decision 48 put access beyond localhost and
+    Pocket ID out of v1, and the Console binds and answers on loopback
+    only. Sage proposed cuts and Mos approved them: sign-in at the edge
+    through Pocket ID forward auth, a systemd user unit beside the bus, a
+    preview hostname so the old build stays, read-only, and not held for
+    S7 or Gate E.
+    - Row 74 (#1568, brief `docs/plans/2026-10-11_webui-preview.md`),
+      owner Dewey after their row 59 review, reviewers Darkwing and
+      Filbert. It goes ahead of Sage's rows 64-66.
+    - It is blocked on Q91, Jason's answer on amending 48. No code until
+      then, and nothing is served until he approves ops-01's route from
+      the edge to this host. ops-01 starts the Pocket ID client, the DNS
+      name, the cert and the route proposal now.
+    - Dates given to Mos: preview likely 10-14, worst 10-20, committed
+      10-16, each assuming the ruling on 10-12. Cutover likely 10-23,
+      worst 10-30, not committed until the first S7 piece closes.
+    - The tradeoff: the identity check trusts a header from whatever
+      reaches the loopback port. That is safe only if the proxy strips the
+      header from clients and is the only path in from off the host. A
+      local process can still forge it, the same exposure the Console's
+      reads have today. In-app OIDC would close that and costs several
+      rows; it waits for cutover or later.