diff --git a/docs/CURRENT-STATE.md b/docs/CURRENT-STATE.md
index 8879d49..466f51f 100644
--- a/docs/CURRENT-STATE.md
+++ b/docs/CURRENT-STATE.md
@@ -1479,6 +1479,15 @@
   carry, and repointing it would change its RELEASE rather than its URL, so it is a separate
   question. Gauntlet ALL GREEN (93); repo-lint 0 fail; `provider-bundle-check` PASS on the dc0
   deploy input.
+  **RULING 1 APPLIED LIVE 2026-07-31 and the picture is now CLEAN.** Overlay re-staged on the
+  rack hash-verified (`e3be85e4`); the origin set on all 15 apps and read back on a sample of
+  each kind. **MEASURED AFTER: units in `error` are EXACTLY the three snap-dependent
+  applications -- `mysql-innodb-cluster` (x3), `ovn-central` (x3), `vault` (7 units) -- and
+  every ceph and OpenStack API app has cleared.** State: 14 waiting, 5 maintenance, 4 blocked,
+  3 active, 7 error. **So the deploy is now blocked on exactly ONE unbuilt thing: the snap
+  path (ruling 2), which is the D-135 items 2-3 gap.** Progression across the session, all
+  measured: 22 error -> 17 (backports) -> 4 (prefer-ipv6) -> 7 units in the single snap class
+  (the count rose because more units reached the snap stage, not because more broke).
   **memcached SCALED to 3 in `overlays/dc-ha-scaleup.yaml`** (operator-directed 2026-07-31);
   its exclusion comment is RE-POINTED rather than left stale. **`ceph-rbd-mirror` is PINNED,
   NOT SETTLED** -- gap register **item 22** carries four options and the recommendation