BunsDev · Oct 18, 2026 · Oct 18, 2026 · Oct 18, 2026 · Oct 18, 2026 · Oct 18, 2026
diff --git a/docs/auto-routing.md b/docs/auto-routing.md
@@ -128,7 +128,7 @@ deterministically, and every step that changes the outcome adds a reason to the
    (`routing/catalog.ts`). The ladder is rebuilt from each backend's model list: Modex's
    fixed Claude aliases (haiku 0 · sonnet 1 · opus 2 · fable 3) and Codex's live catalogue (gpt-5.5 0 ·
    gpt-5.6-* 1 · gpt-6-luna/sol 2 · gpt-6-astra 3), with description hints for anything new
-   and the middle tier for unknowns.
+   and tier 2 for unknowns.
    Successful non-empty lists are cached for a minute. A failed or empty list retries on
    the next turn; discovery errors appear in receipts and any resulting stop message.
 5. **Effort.** Tier sets the base (low/medium/high/xhigh); deep reasoning bumps one; an

diff --git a/docs/modex-signin.md b/docs/modex-signin.md
@@ -37,7 +37,8 @@ Production is the default public client `client_01M4DWGC09T282ZJHMZCX395ZP`.
 `MODEX_WORKOS_ENV=staging` selects `client_01M4B32N0CQBCPPMZ5WA4NM5P4` and visibly
 labels the card **Staging**. Both environments allow
 `http://127.0.0.1:*/auth/workos/callback`; the fixed default callback is
-`http://127.0.0.1:43821/auth/workos/callback`. GitHub OAuth provider configuration and
+`http://127.0.0.1:43821/auth/workos/callback`. Modex itself listens on a free port the system
+picks for each sign-in, which the wildcard entry covers. GitHub OAuth provider configuration and
 credentials stay in WorkOS, not in the desktop or environment variables.
 
 Credentials live in `<MODEX_HOME>/app/workos-production.enc` or `workos-staging.enc`,

diff --git a/docs/reviews/2026-10-11-companion-apple-readiness.md b/docs/reviews/2026-10-11-companion-apple-readiness.md
@@ -288,3 +288,8 @@ The second physical LAN, first-use consent, fresh macOS user, complete signed we
 Open/Cancel path, sleep/wake, migration and other Store acceptance limits above remain
 open. No Apple metadata, submission, build or release was changed. Preserve this
 worktree and its evidence until delivery and a separate guarded retirement review.
+
+**Attribution resolved, 2026-10-18.** Val confirmed on #290 that the grant the GUI Connect run
+acquired before native prompt capture came from Val's own manual testing. The Cancel check stays
+unaccepted; see the
+[signed acceptance review](2026-10-11-store-signed-acceptance.md#attribution-resolved-2026-10-18).
diff --git a/docs/reviews/2026-10-11-store-readiness.md b/docs/reviews/2026-10-11-store-readiness.md
@@ -230,3 +230,8 @@ Keep welcome, native authorization, denial, reconnect, and revocation captures i
 5. Obtain explicit authorization for any new Apple upload, submission, or release. This audit supplies preparation, not that authorization.
 
 Apple's current rules require sandboxing and constrain additional installations and host-dependent functionality; the separate-host approach remains an App Review eligibility question. Source correctness and demo access cannot settle it. [App Review Guidelines 2.4.5 and 4.2.3](https://developer.apple.com/app-store/review/guidelines/).
+
+**Attribution resolved, 2026-10-18.** Val confirmed on #290 that the grant the GUI Connect run
+acquired before native prompt capture came from Val's own manual testing. The Cancel check stays
+unaccepted; see the
+[signed acceptance review](2026-10-11-store-signed-acceptance.md#attribution-resolved-2026-10-18).
diff --git a/docs/reviews/2026-10-11-store-signed-acceptance.md b/docs/reviews/2026-10-11-store-signed-acceptance.md
@@ -279,3 +279,11 @@ In flight. The text is unchanged except that links now resolve from `docs/review
   [Signed acceptance evidence and limits](2026-10-11-store-signed-acceptance.md).
   Beta approval covers the October 6 builds; production
   approval and acceptance of this branch's changes remain open.
+
+## Attribution resolved (2026-10-18)
+
+The second GUI Connect observation above recorded that a grant and saved credential appeared
+before the Host dialog was captured, that the agent did not click Allow, and that attribution
+was awaiting Val's response. On 2026-10-18 Val confirmed on #290 that this grant came from
+Val's own manual testing. The rest of the record stands: no Cancel success was recorded, so the
+welcome Open sequence and its Cancel check remain unaccepted.
diff --git a/docs/status.md b/docs/status.md
@@ -173,8 +173,8 @@ and [landing verification](reviews/2026-10-11-landing-clarity.md).
 
 
 - **Native conversation fidelity** ([tracker #273](https://github.com/TypeSafeAI/modex/issues/273)).
-  Slices that landed are under "On main, unreleased". Open: #283 and #288 (CF-4), #286 and #291
-  (CF-2), and #293 (CF-3). The tracker keeps the dependency order and each slice's evidence.
+  Slices that landed are under "On main, unreleased". The tracker keeps the dependency order and
+  each slice's evidence, and its child issues link their open PRs.
 
 - **Mac App Store edition.** A sandboxed Store front end with a separately installed signed
   host, as Val chose. [Investigation and parity matrix](mac-app-store.md).
@@ -195,8 +195,7 @@ and [landing verification](reviews/2026-10-11-landing-clarity.md).
     revocation. [Signed acceptance](reviews/2026-10-11-store-signed-acceptance.md#status-summary).
   - **Open:** the full parity matrix, graceful host shutdown, fresh-user setup, installed-host
     auto-launch, sleep/wake, the full welcome Open sequence and its Cancel check, a macOS
-    TestFlight install, App Review, and Val's attribution of one GUI Connect grant.
-    [Readiness](reviews/2026-10-11-store-readiness.md).
+    TestFlight install, and App Review. [Readiness](reviews/2026-10-11-store-readiness.md).
 
 - **Modex Companion TestFlight.** The native iPhone MVP merged in #103. A phone can view
   threads, start Local or Worktree threads, send follow-ups, and answer approvals while the

diff --git a/docs/update-recovery.md b/docs/update-recovery.md
@@ -87,8 +87,8 @@ to open the recovery folder.
 
 ## Verification boundary
 
-The local monorepo build and workspace typechecks passed. The full unit suite passed
-1,362 tests with 15 skips, and the integrated E2E run passed all 270 desktop and seven
+On 2026-10-12, the local monorepo build and workspace typechecks passed. The full unit suite
+passed 1,362 tests with 15 skips, and the integrated E2E run passed all 270 desktop and seven
 site cases. Coverage includes independent raw drafts across full relaunch, save-failure
 close veto and retry, pending original messages, attachment capacity and late results,
 owner removal, automatic retirement, terminal lifecycle, partial-shutdown reload, and