diff --git a/docs/session-ledger.md b/docs/session-ledger.md
index ade7c9f..5c0963a 100644
--- a/docs/session-ledger.md
+++ b/docs/session-ledger.md
@@ -111,9 +111,13 @@
 - **DONE Section 2.1:** controller state backup via `juju create-backup -m
   admin/controller` (902MB, checksummed, ~/openstack-baseline/, jumphost-only).
   NOTE: controller model is admin/controller, NOT <user>/controller.
-- **NEXT:** Section 2.2 `juju upgrade-controller --agent-version 3.6.25` (gated),
-  then model agents (S3), then 17 charm refreshes in groups (S4), post-verify (S5),
-  re-baseline + close-out (S6).
+- **DONE Section 2.2/2.3:** controller upgraded 3.6.24 -> 3.6.25 (blind window ~1 min,
+  as expected); post-controller cloud-assert PASS.
+- **DONE Section 3:** all 91 openstack-model agents + controller machine at 3.6.25,
+  states clean (63 idle / 28 started), nothing stuck.
+- **NEXT:** Section 4 charm refreshes, 17 apps in groups (G0 keystone -> G1 control
+  plane APIs -> G2 octavia -> G3 dashboards -> G4 nova-compute), per-app settle gates,
+  cloud-assert at group boundaries; then post-verify (S5), re-baseline + close-out (S6).
 - **Window findings logged for close-out (do not action mid-window):**
   1. magnum can-upgrade-to anomaly REPRODUCED (points at magnum-dashboard-122;
      evidence ~/openstack-baseline/magnum-can-upgrade-anomaly-20260705.json) AND