diff --git a/AGENTS.md b/AGENTS.md
index c33b6d4..05d63fc 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -28,7 +28,7 @@ for t in $(find backend -name 'test_*.py'); do echo "== $t"; python3 "$t" || bre
 # Build the s9pk (x86_64 only) -> ten-database_x86_64.s9pk  — BUMP THE VERSION FIRST (see Always)
 cd start9/0.4 && make
 # Install to the box — PRODUCTION; get explicit user OK first. TODO: confirm exact host/context.
-start-cli package install -s ten-database_x86_64.s9pk   # target: immense-voyage.local
+start-cli package install -s ten-database_x86_64.s9pk   # target host = $START9_BOX_HOST (real value lives in your local start-cli context config, NOT this repo)
 ```
 
 - **Migrations** apply automatically at startup via `backend/core_migrations.py` from `backend/migrations/NNNN_*.sql`, tracked in a `schema_migrations` ledger. Verify a new one against a **copy** of `data/crm.db`, never production.
@@ -66,7 +66,7 @@ start-cli package install -s ten-database_x86_64.s9pk   # target: immense-voyage
 - **Verify before shipping:** `python3 -m py_compile` the edited files; for DB logic, run the change against a **copy** of `data/crm.db`.
 - **Make migrations/seeders deployment-state-invariant and idempotent:** target rows **structurally**, not by transient text the same change mutates; capture prior state so a revert is exact. (Learned the hard way: matching old nodes by a body string the same changeset deleted broke fresh DBs.)
 - **Keep real LP data out of Claude:** develop only on code/schema/synthetic-or-locally-redacted data; route any real record substance through `backend/redaction` before it reaches a Claude model.
-- **Get explicit user authorization before any production deploy/install** to `immense-voyage.local`.
+- **Get explicit user authorization before any production deploy/install** to `$START9_BOX_HOST`.
 - **Ship a paired `.down.sql`** with every new migration.
 
 ## Never
@@ -88,3 +88,13 @@ start-cli package install -s ten-database_x86_64.s9pk   # target: immense-voyage
 - Retrieval/embeddings contract: `docs/EMBEDDINGS.md`
 - CRM schema/API tour: `docs/crm-overview.md`
 - Current thesis handoff: `docs/thesis-handoff.md`
+
+## Current state
+
+_Phase 0 substrate + Phase 1 thesis/outreach are built; current package is **v0.1.0:73**. Longer-term backlog: `ROADMAP.md`._
+
+- **Working (all draft-only):** CRM + ingest (chunk→embed→Qdrant + retrieval) + redaction boundary; Gmail capture (DWD) + email-activity propose→approve; Thesis Workshop + Architect (Claude) with dual-approval gate; Outreach Draft Assistant + follow-up radar + per-user voice + Tier-B in-thread Gmail draft creation.
+- **In progress:** v0.1.0:73 is committed and built but **not installed** — the box (`$START9_BOX_HOST`) runs v0.1.0:72, awaiting deploy authorization. On boot, `ensure_thesis_v2_promoted` makes the v2.0 reserve-asset spine the working *approved* spine (node-level, reversible).
+- **Decided, not yet built:** CRM is the canonical thesis backbone with the signal-engine reading from it (reconciliation unwired); reply-all for Tier-B drafts is next (drafts currently reply to the LP only).
+- **Known gaps:** the v2.0 spine is the *working* spine but **not a canonical `thesis_version`** (needs Grant + Jonathan dual sign-off); Appendix-A conviction/exposure (incl. ~40% Strike) stay Grant's working read, not canonical and not fed to the engine; on an already-seeded box the AI/energy-operator *segment* angle still shows old copy (gated on the banner decision); live features are unverified on the box.
+- **Next:** 1) deploy v0.1.0:73 (on OK); 2) Grant + Jonathan freeze v2.0 canonical in the Workshop; 3) build reply-all; 4) confirm Appendix-A figures + Maple/OpenSecret/Primal, then promote; 5) verify live features on the box.