diff --git a/docs/session-ledger.md b/docs/session-ledger.md
index d2537c1..457be9e 100644
--- a/docs/session-ledger.md
+++ b/docs/session-ledger.md
@@ -517,6 +517,14 @@
   override state UNVERIFIED -- juju macaroon expired (needs `juju login`); confirm
   use-policyd-override is reverted to baseline. Draft in worktree agent-a73ec798
   (uncommitted). Clients unaffected: CLI identity path is the documented behavior.
+- **D-076 PINNED (operator 2026-07-08):** do NOT work D-076 while devteam are
+  running their own tests in the env. Deferred until devteam testing completes;
+  no further D-076 investigation/window until then. Draft stays in worktree.
+- **test1 orphan SCHEDULED FOR REMOVAL (operator 2026-07-08):** approved to delete;
+  staged, NOT run now. Exact gated command (re-verify role-less at execution):
+  `openstack user delete 9a62f88e331f41adb5c9e41225ec8698`  (name test1, devteam
+  domain, 0 roles measured 2026-07-08). Run at the next convenient window; it is a
+  role-less shell with no resources, so removal does not affect devteam's tests.
 
 ## REMAINING OPEN WORK (single list for session resume; 2026-07-07, updated post-devteam-window)