diff --git a/.planning/STATE.md b/.planning/STATE.md
index 8bcd712a..5703e9ff 100644
--- a/.planning/STATE.md
+++ b/.planning/STATE.md
@@ -5,10 +5,10 @@ milestone_name: milestone
 current_phase: 09
 current_phase_name: BotFights Platform Upgrade
 status: planning
-stopped_at: Phase 10 COMPLETE (10-01..10-06); security-fix verification on archi-dev-box done — found and fixed a delivery gap that would have made the OTA's Bitcoin-RPC fix a no-op on affected nodes
+stopped_at: Phase 10 COMPLETE; Bitcoin-RPC delivery gap found+fixed+proven on archi-dev-box; Phase 1 resumed — 01-04 (FED-05 Lightning mesh facts) complete
 last_updated: "2026-08-02T23:20:00.000Z"
 last_activity: 2026-08-02
-last_activity_desc: Verified a05956c4 on-node — LND closed, Bitcoin RPC still OPEN; root-caused to reconcile skipping Quadlet-running apps behind an uninstall marker; fixed (f6b5245b), deployed, node re-probed 401. Macaroon/credential rotation NOT actioned (user-gated).
+last_activity_desc: 01-04 shipped (lnd.getinfo identity+uris, LightningInfo mesh message, mesh.lightning-peers/send-lightning-info) — 1087 tests green; found 3 wholesale-rebuild paths that would have silently wiped MeshPeer.lightning_uri
 progress:
   total_phases: 11
   completed_phases: 1
@@ -182,5 +182,5 @@ Open on this thread (all recorded as broken windows, none blocking):
   being closed rather than lived with. rotate-lnd-macaroon.sh stays as a tool, exercised in
   detect mode only, never run against a node. Do not re-litigate; see
   docs/security/BITCOIN-RPC-PROXY-EXPOSURE.md.
-- archy-x250-dev has been offline 2 days, so every "dev pair" verification this session
-  reached one node, not two.
+- Dev-pair verification is archi-dev-box ONLY, by operator instruction 2026-08-02. Do not
+  raise archy-x250-dev as a blocker again.