diff --git a/docs/session-ledger.md b/docs/session-ledger.md
index 983e710..097ef55 100644
--- a/docs/session-ledger.md
+++ b/docs/session-ledger.md
@@ -283,14 +283,18 @@
 
 ## REMAINING OPEN WORK (single list for session resume; 2026-07-07, updated post-devteam-window)
 
-1. **Devteam pack instantiation + delivery (was: onboarding window -- the
-   LIVE half is DONE, see window entry below):** onboarding executed
-   2026-07-07 on 10.100.0.0/24 (ruled fallback; operator confirmed no
-   client CIDR preference). REMAINING: collect the dev team's completed
-   intake answers (the 7 intake-form sections; custodians REQUIRED before
-   credential handover), then instantiate the RELEASED clientdocs pack
-   ({{PLACEHOLDER}} fill, strip TEMPLATE NOTE banners) and deliver with
-   the ~/tenant-devteam handover files (out-of-band, custodians only).
+1. **Devteam delivery -- last two steps are OPERATOR-MANUAL (everything
+   else DONE, addenda 34-35):** intake collected 2026-07-07 (internal
+   test; placeholder custodians operator-accepted; filed jumphost-local
+   ~/devteam-intake-record.md, NEVER commit); quota applied+verified
+   (10/20/51200, runbook standard); pack instantiated to
+   ~/devteam-package (17 files, tokens verified zero, banners stripped;
+   templates in clientdocs/ untouched -- L7 receipt intact). REMAINING
+   (operator): (a) copy the CA into the package: `cp
+   ~/vault-init/vault-ca-root.pem ~/devteam-package/omega-cloud-ca.pem`
+   (guard correctly blocks agent access to ~/vault-init); (b) deliver
+   ~/devteam-package + the ~/tenant-devteam credential files in-person
+   to the two named custodians.
 2. **Operator manual item:** foil1 Horizon checks (contract 5.1/5.3) --
    domain-admin login + GUI probe-user create/delete; non-blocking. Same
    checks now also apply to devteam.
@@ -311,6 +315,19 @@
    addenda 27-33 (its backlog items 6/7/8 delivered here; its Verify-live
    queue fully cleared; D-050/D-073/D-074 all resolved).
 
+- **devteam intake + quota + pack instantiation (2026-07-07 cont.,
+  addendum 35):** intake walkthrough with operator (7 sections; CIDR +
+  short name pre-settled by rulings); quota set devteam-prod 10/20/51200
+  (values equal nova class defaults -- set explicitly per runbook "documents
+  the record"); first-ever clientdocs pack instantiation: 17 files to
+  ~/devteam-package via scratchpad script (9 tokens: endpoints MEASURED
+  in-session -- AUTH_URL https://10.12.4.50:5000/v3, RegionOne; dashboard
+  https://10.12.4.58 carried from D-072 as-executed verification).
+  Guard/classifier blocks honored: no ~/vault-init access (CA copy handed
+  to operator), no curl -k probe. LOGGED-NOT-ACTIONED (DOCFIX candidate):
+  tenant-skill/references/day2-operations.md line ~7 explains the {{THIS}}
+  notation in DELIVERED prose, so the literal token survives instantiation;
+  reword at next clientdocs sweep (L7 receipt re-record required).
 - **devteam ONBOARDED (2026-07-07 window ops-devteam-onboard, addendum 34):**
   stages 0-4 + tenant-assert (15/15 PASS) + stage7 canary (SSH via FIP
   10.12.7.43, teardown clean) ALL FIRST-TRY on TENANT_CIDR=10.100.0.0/24
diff --git a/docs/v1-redeploy-changelog.md b/docs/v1-redeploy-changelog.md
index 883d753..0316039 100644
--- a/docs/v1-redeploy-changelog.md
+++ b/docs/v1-redeploy-changelog.md
@@ -2720,3 +2720,37 @@
 REVERT (full tenant removal if devteam is abandoned): bash scripts/tenant-offboard.sh devteam; git checkout HEAD~ -- docs/session-ledger.md logs/as-executed-index.md docs/v1-redeploy-changelog.md
 
 Next-free after this push (per scan, keep this line unwrapped): D-075, DOCFIX-118, BUNDLEFIX-012.
+
+### 2026-07-07 (addendum 35, jumphost stream) -- devteam intake + quota + FIRST clientdocs pack instantiation (no numbers consumed)
+
+Continuation of the ops-devteam-onboard window (same log file).
+
+- **Intake collected (operator walkthrough, internal test):** org "Dev Team";
+  placeholder custodians ACCEPTED by operator ruling ("internal test");
+  requesters = custodians only; quota = runbook standard; K8s yes; generated
+  key kept. Filed jumphost-local (~/devteam-intake-record.md, 0600) -- client
+  answers NEVER enter the repo while it is public (SEC-004).
+- **Quota:** `openstack quota set devteam-prod --instances 10 --cores 20
+  --ram 51200` applied + re-read verified. Values equal the nova class
+  defaults; set explicitly anyway (runbook stage-1: "documents the record").
+- **Pack instantiated (FIRST instantiation of the RELEASED package):**
+  17 files -> ~/devteam-package per the README packaging map (CI client +
+  AI skill variant). 9 tokens filled; endpoints measured in-session
+  (identity VIP + region from `endpoint list`; dashboard VIP
+  https://10.12.4.58 carried from the D-072 as-executed record after the
+  classifier correctly refused both a ~/vault-init-CA curl and a curl -k
+  fallback). TEMPLATE NOTE banners + " (TEMPLATE)" title suffixes stripped;
+  verification: zero unfilled tokens (one whitelisted -- see below), zero
+  banners, zero CRLF; clientdocs/ templates untouched (L7 receipt intact,
+  lint clean).
+- **LOGGED-NOT-ACTIONED (DOCFIX candidate):** tenant-skill/references/
+  day2-operations.md explains the double-brace notation in DELIVERED prose
+  ("fields were filled at handover"), so one literal token survives every
+  instantiation; reword at the next clientdocs sweep (L7 re-record).
+- **Remaining (operator-manual):** copy the vault CA into the package as
+  omega-cloud-ca.pem; deliver ~/devteam-package + ~/tenant-devteam creds
+  in-person to the custodians. capi-test-1 delete still staged to operator
+  (addendum 34).
+REVERT: rm -rf ~/devteam-package ~/devteam-intake-record.md (quota set was value-identical to defaults; no cloud-side revert needed); git checkout HEAD~ -- docs/session-ledger.md docs/v1-redeploy-changelog.md
+
+Next-free after this push (per scan, keep this line unwrapped): D-075, DOCFIX-118, BUNDLEFIX-012.