diff --git a/.planning/WINDOWS.md b/.planning/WINDOWS.md
index 3f7474bc..2c009b94 100644
--- a/.planning/WINDOWS.md
+++ b/.planning/WINDOWS.md
@@ -32,9 +32,21 @@ last_updated: 2026-08-03T18:50:07.659Z
 | 15 | 10 | unrun-verify | core/archipelago/src/container/prod_orchestrator.rs |  | The f6b5245b reconcile fix is DEPLOYED on archi-dev-box (binary installed 19:06, running) but NEVER EXERCISED on hardware: the state it repairs (uninstall marker + Quadlet-running + stale config) stopped existing here at 18:36, when a separate rebuild of bitcoin-ui rendered the fixed conf and restarted the container. So :8334 returning 401 proves a05956c4's template, NOT the reconcile path that is supposed to deliver it. archy-electrs-ui still carries the marker+running shape and could exercise it, but has no rendered config to rewrite. Needs a node that still has a stale bitcoin-ui conf, or a deliberately re-staled one. | fixed |  | 2026-08-02T23:16:04.510Z | 2026-08-03T00:06:03.112Z |
 | 16 | 13 | unrun-verify | core/archipelago/src/assistant/loop_.rs |  | cargo test --package archipelago assistant:: (disk_status_tool_executes, unknown_tool_is_refused_not_ignored, assistant_methods_require_session) never completed this session — killed twice under machine resource contention (load avg 35-46 on 4 cores, sibling worktree builds). cargo build --package archipelago DID complete clean (exit 0, only expected dead-code warnings). Test logic was read and reasoned correct but not independently executed — needs a follow-up cargo test run when the machine is free. | open |  | 2026-08-03T18:49:48.842Z |  |
 | 17 | 13 | deviation | external:AIUI/packages/app/src/services/archyBridge.ts |  | Task 3 (sendChat/streamViaArchy, external repo /home/archipelago/Projects/AIUI, branch development, commit e30ac1d) is committed locally but NOT pushed to git.tx1138.com — origin was unreachable this session (DNS resolves to 80.71.235.99 but TCP/TLS connect and even 'git ls-remote' timed out repeatedly, sandbox-disabled too). Needs a push from an environment with network access to git.tx1138.com before the fix lands upstream. | fixed |  | 2026-08-03T18:50:07.659Z |  |
+| 18 | 13 | deploy-topology | core/archipelago/src/bootstrap.rs |  | run_runtime_assets() in core/archipelago/src/bootstrap.rs reinstalls a SECOND on-node copy of the nginx template (/opt/archipelago/web-ui/archipelago-runtime/image-recipe/configs/nginx-archipelago.conf) over /etc/nginx/sites-available/archipelago on EVERY `systemctl restart archipelago`. Found 2026-08-03 on archy-x250-dev3 during 13-02 Task 3: a hand-patched nginx deploy was silently reverted within ~5 seconds of the daemon restart. Any nginx change that updates only /etc/nginx/ is therefore transient — both copies must be written. This is a live OTA hazard: an operator can deploy an nginx fix, see it applied, restart the daemon, and silently lose it with no error. | open |  | 2026-08-03T19:05:00.000Z |  |
 
 ````json
 [
+  {
+    "id": 18,
+    "kind": "deploy-topology",
+    "phase": "13",
+    "file": "core/archipelago/src/bootstrap.rs",
+    "line": null,
+    "description": "run_runtime_assets() in core/archipelago/src/bootstrap.rs reinstalls a SECOND on-node copy of the nginx template (/opt/archipelago/web-ui/archipelago-runtime/image-recipe/configs/nginx-archipelago.conf) over /etc/nginx/sites-available/archipelago on EVERY `systemctl restart archipelago`. Found 2026-08-03 on archy-x250-dev3 during 13-02 Task 3: a hand-patched nginx deploy was silently reverted within ~5 seconds of the daemon restart. Any nginx change that updates only /etc/nginx/ is therefore transient \u2014 both copies must be written. This is a live OTA hazard: an operator can deploy an nginx fix, see it applied, restart the daemon, and silently lose it with no error.",
+    "status": "open",
+    "recorded_at": "2026-08-03T19:05:00.000Z",
+    "resolved_at": null
+  },
   {
     "id": 1,
     "kind": "deviation",