diff --git a/docs/session-ledger.md b/docs/session-ledger.md
index ae6ef3f..0ed041f 100644
--- a/docs/session-ledger.md
+++ b/docs/session-ledger.md
@@ -313,8 +313,18 @@
 6. **The test fake diverges from reality at the failure point:** `fake_pynetbox.get()` returns
    `matches[0]` on a multi-match where REAL pynetbox RAISES. So the harness cannot catch #5.
 
-**Recommended sequence: fix 1-3 BEFORE C2.** 1 and 3 are partial-write-no-rollback on the production
-IPAM; 2 is what we would use to prove the write was correct.
+**Recommended sequence: fix 1-3 BEFORE C2.** 1-3 are DONE (2026-07-14,
+`docs/changelog-20260714-netbox-write-path-hardening.md`): the roles-importer preflight now covers
+ARIN + the ULA, the prefixes-importer preflights every role, the fidelity check is BOTH-bounds +
+delta-scope-aware, and the test fake raises like real pynetbox. Gauntlet 58 ALL GREEN.
+**CONSEQUENCE TO ACT ON:** the sandbox was declared "proven faithful" (2026-07-14) using the
+fidelity check BEFORE it was hardened -- i.e. under the version that could FALSE-GREEN. RE-RUN
+`sandbox-fidelity-check.py` against the sandbox under the hardened check before trusting that
+"faithful" verdict, and certainly before C2 feeds the carve upstream. (Not done this session: it
+needs the sandbox NetBox token, which is operator-held; folds naturally into the C2 step.)
+Items 4-6 remain LOGGED not fixed.
+
+(Historical rationale: 1 and 3 are partial-write-no-rollback on the production IPAM; 2 is what we would use to prove the write was correct.)
 
 ## Operator-gated / PINNED (do NOT re-ask; these are rulings, not open questions)