diff --git a/docs/CURRENT-STATE.md b/docs/CURRENT-STATE.md
index 60b7ea3..a274e27 100644
--- a/docs/CURRENT-STATE.md
+++ b/docs/CURRENT-STATE.md
@@ -2466,6 +2466,10 @@
     **T21c** (`vr1-dc1` derives its own zone, proving it is not a dc0 constant).
   - The F9 reissue obligation STANDS unchanged: both live certs carry `dc0.vr0` and must be
     reissued into their DC's zone before `os-public-hostname` is set.
+  - **CAPTURE: `docs/audit/docfix205-d117-annotation-20260730.txt`** -- the quoted D-117 Status
+    line, D-119's selector-only discharge, annotation coverage measured 0/4 -> 4/4, the phase-6
+    expansion old-vs-new run in a real shell, live A12 on the headend, and both hosts' gates
+    (gauntlet ALL GREEN 89 on vcloud AND voffice1; repo-lint 0 fail; ledger-scan unchanged).
   **A PRECEDENCE BUG THE HARNESS CAUGHT:** REFUSE was checked before FAIL, so once A12 armed, a
   CONFIRMED wrong-region SAN reported as "could not evaluate". A known defect outranks an
   unevaluated one; the verdict now reports FAIL first and still names the refusal.