diff --git a/agents/duckworth/work/row253/RUN5-GATE-3b91cfdaf.md b/agents/duckworth/work/row253/RUN5-GATE-3b91cfdaf.md
new file mode 100644
index 000000000..6ac656cc9
--- /dev/null
+++ b/agents/duckworth/work/row253/RUN5-GATE-3b91cfdaf.md
@@ -0,0 +1,34 @@
+# Row 253 run 5 whole gate: record 3b91cfdaf (duckworth-0172)
+
+Reviewer: Duckworth. Runner: Gander. Request: gander-0126.
+Candidate 48e450ce8, source 14e460061, manifest 591020a1, base aca16404c. Same candidate and
+manifest as my duckworth-0164 approval.
+Static git reads of agents/gander/work/queue-253/run5-gate at 3b91cfdaf. No node, no test run.
+
+## Verdict: APPROVE the run 5 gate for the manifest round
+
+- Scope. aca16404c..14e460061 outside agents/ is 8 paths. Its only package tests are cli
+  (case1-accept, case2-unit, case-sudo-fixture). The rest is scripts/case1-accept.sh,
+  scripts/case2-unit.sh, the webui README, BUILD-LOG and DEFERRED. 48e450ce8..3b91cfdaf
+  outside agents/gander/ is empty, and HEAD-DIFF-OUTSIDE-GANDER.txt agrees.
+- Whole runs. RESULTS.md lists CLI 55 files and WebUI 58 files, each file run whole with 0 fail
+  and one named skip. The bus 20-file union isn't a whole-bus claim and RESULTS.md says so.
+  The candidate touches no bus file, so that's enough. The ten shells pass 425/0.
+- Skips. All four are named: the editor esbuild pin (0.28.1 vs 0.28.2), queue verify outside the
+  canonical root, and the row 244 provider skip, twice. None is in a file this row changes.
+- N9 is verbatim at case2-unit ok 43.
+- Kills. M1-M40 are 40/40 with no timeout counted. The two I ruled on:
+  - M21 (0161): changes/M21.log is `not ok` at case1-accept.test.mjs:243, ERR_ASSERTION with the
+    message `peer-malformed` against P10's report. That's the named P10 assertion at the whole
+    gate.
+  - M38 (0163, mos-1298): changes-resume/M38.log is strictEqual at case2-unit.test.mjs:203:10,
+    "signals/exec: direct query PID must equal its kernel SID", 1298470 vs 1298319. That's an
+    assertion, not a throw before one.
+- Resume. Sage ruled the M32 resume under sage-2811. resume.py filters only the loop to M32-M40,
+  and its base runs are fresh. I accept it as the same run.
+
+## Notes
+
+- N1. The editor esbuild skip comes from the canonical node_modules pin (0.28.1). It's not this
+  row's skip, but each gate that runs editor-provenance will carry it until someone runs `npm ci`
+  in packages/webui. It belongs to whoever owns that pin.
diff --git a/docs/SESSIONS.md b/docs/SESSIONS.md
index be15125ed..6c849b33a 100644
--- a/docs/SESSIONS.md
+++ b/docs/SESSIONS.md
@@ -1508,3 +1508,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-22T16:57Z | Duckworth (Opus 5.5) | row 206 (193b2, #1704) manifest review of 631a256ba (duckworth-0169) | APPROVE, C1-C2 bind the 275 rebase round, departures 1-7 accepted, N1-N4 |
 2026-10-22T16:59Z | Duckworth (Opus 5.5) | row 271 (264d, #1776) design early look, draft 2 5ab7bcf4a (duckworth-0170) | shape holds (receive-acknowledged drain), B1-B4 to fold before code, N1-N8 |
 2026-10-22T17:02Z | Duckworth (Opus 5.5) | row 271 early-look folds 549b5a0eb (gizmoduck-0270) | go to code with C1 held-start attempt key, C2 sage-2828 cancel stage; duckworth-0171 |
+2026-10-22T17:19Z | Duckworth (Opus 5.5) | row 253 run 5 whole gate record 3b91cfdaf (gander-0126) | APPROVE gate for manifest round, M21/M38 kills by assertion; duckworth-0172 |