diff --git a/docs/execution/approved-issue-plans-ledger.md b/docs/execution/approved-issue-plans-ledger.md
index e10fe6c87..cbfd4e2b1 100644
--- a/docs/execution/approved-issue-plans-ledger.md
+++ b/docs/execution/approved-issue-plans-ledger.md
@@ -39,9 +39,9 @@ state changes are outside scope.
 | 04 AI provider compatibility | #2732, #2766, #2723, #2708 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | serialize edits to AI service | zero drift; historical #2708 Responses path and #2766 structured Test path absent; remaining tuples differ | focused API 96 and full API suites/typecheck/boundaries passed in audit | — | select wire/state/import/base-path unit only after exact current tuple fails | provider/model/base URL/path/version/action/error tuple and allowed endpoint unavailable |
 | 05 AI provider migrations | #3152 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate DB/startup with 03 | zero drift; table schema, migration, startup ordering, Docker copy path coherent; `42P01` historical cause unresolved | audit API/server/DB tests, typechecks, boundaries passed; no real PostgreSQL migration fixture | — | choose config/packaging/startup/migration repair only after disposable reproduction | affected image layout/digest, working directory, DB schema/search path/journal, fresh+upgrade DB fixture |
 | 06 image storage delivery | #2684, #2778 | blocked | audit `task_855fbee0a803` | `codex-audit-backend-01-06` | `7a98f6662` → no source change | coordinate 12/15/25 renderer/image fixtures | #2684 ACL cause fixed by merged #3432 (`35cecf9`); #2778 Browserless path obsolete; current topology unproved | #3432 hosted checks successful; audit storage/upload/PDF tests, typechecks, boundaries passed | #3432 merged before run | deployment retest plus shared real-encoding/backend/render fixture before repair | deployed digest; disposable S3/Garage/SeaweedFS/MinIO/proxy and browser/server raster matrix unavailable |
-| 07 AIO deployment | #2722 | published; late hosted fix queued | queued `task_6d0545ee43b1` | `codex/issue-2722-postgres-docs` | `7a98f6662` → `a7b8c4cc5` | none | late Greptile thread correctly notes repository-build users can reach image-service log command after taking alternative update path | existing head checks green/approved; one new unresolved thread needs bounded fix and rereview | [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457) | add adjacent `reactive_resume` log path, verify, independently rereview, then push/reply/resolve | no AIO implementation; optional Unraid host smoke unavailable |
+| 07 AIO deployment | #2722 | published; late hosted fix active | fix `task_6d0545ee43b1` / `ctx_1d6a1e36def3` | `codex/issue-2722-postgres-docs` | `7a98f6662` → `a7b8c4cc5` | none | late Greptile thread correctly notes repository-build users can reach image-service log command after taking alternative update path | existing head checks green/approved; one new unresolved thread under bounded fix | [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457) | add adjacent `reactive_resume` log path, verify, independently rereview, then push/reply/resolve | no AIO implementation; optional Unraid host smoke unavailable |
 | 08 root public resume | #2669 | plan amendment required before implementation | audit `task_9f27829ca50f` | planned `codex/issue-2669-root-resume` | `7a98f6662` → — | none | current password redirect rejects `/`; public view is slug-hook-bound; SSR canonical cannot import server env; expanded auth/canonical contract identified | audit focused API/web suites, typechecks, boundaries passed | — | amend ownership for identity-vs-return auth flow and server-derived canonical root, then dispatch coherent feature | engineering scope correction; feature remains narrower than arbitrary domain/TLS registry |
-| 09 external version backup | #2705 | published; hosted correction under final rereview | review `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | `codex/issue-2705-git-backup-docs` | `7a98f6662` → published `6931d2cc4`; local `4ffdd96bd` | none | command-site prose now requires fresh/unused output filename; sentinel preservation and import-as-new recovery proved | 152 focused tests plus Markdown/commands/link/diff/scope green after fix; independent rereview active | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | clean rereview, push corrected head, resolve duplicate threads | DB integration/E2E unavailable; no sync/remote/whole-account restore |
+| 09 external version backup | #2705 | published; exact-head hosted checks running | coordinator publication follow-up | `codex/issue-2705-git-backup-docs` | `7a98f6662` → `4ffdd96bd` | none | clean round-4 rereview; command-site prose requires unused output; sentinel/current resume preservation and import-as-new recovery proved | fresh coordinator 152 tests plus Markdown/diff/scope green; exact-head hosted checks queued | [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458) | after hosted checks, reply/resolve two outdated duplicate threads; keep unmerged | DB integration/E2E unavailable; no sync/remote/whole-account restore |
 | 10 legacy link routing | #2836 | pending implementation after brief correction | audit `task_9f27829ca50f` | planned `codex/issue-2836-retired-slug-notices` | `7a98f6662` → — | none | prospective same-username slug-attempt notice remains coherent; exact DB/API/UI/E2E owner set verified | audit focused API/web suites, DB/API/web typechecks, boundaries passed | — | correct final E2E target to `public-sharing.spec.ts`, then implement migration/API/owner UI atomically | historical cause absent; no redirects/emails/recovery; prospective partial coverage only |
 | 11 job search policy | #3010 | published | implementation/review chain complete | `codex/issue-3010-jsearch-docs` | `7a98f6662` → `1d0397884` | none | two valid wording comments fixed; independent full-diff re-review found no issues; replies carry commit evidence | 52 focused tests plus Markdown/link/diff/base/scope and all exact-head hosted checks green; approved; zero unresolved threads | [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459) | keep unmerged; monitor only | real provider/browser optional gate unavailable; removal motive unknown |
 | 12 preview/export failures | #3323, #3290, #3033, #3007, #2609 | blocked corrective work; diagnostic-ready | audit `task_1c6582ccdeae` | `codex-audit-rendering-12-19` | `7a98f6662` → no source change | renderer ownership; share observation harness with 18 | zero drift; staged-preview/error-boundary baselines remain; reports cross persistence/font/PDF/viewer/deployment boundaries | audit focused web/PDF suites, affected typechecks, boundaries, build passed | — | isolate PT Sans, browser/config, and template-selection boundaries; no shared fix | exact JSON/output/browser/config/current reproduction missing |
@@ -100,7 +100,7 @@ state changes are outside scope.
 | Plan 09 hosted review fix round 2 | `task_8605c30ca032` / `ctx_2e0aa7be1312` | same Plan 09 worktree | complete; worker released | commit `9dd218ba1`; non-destructive recovered-file command plus synthetic proof |
 | Plan 09 final hosted re-review | `task_435249ae4c23` / `ctx_5fd78d0eeccd` | same Plan 09 worktree | complete; changes required; worker released | low: fixed `recovered-resume.json` name silently overwrites an existing local recovery file |
 | Plan 09 review fix round 3 | `task_9e6fdbe67fb7` / `ctx_9087e895192f` | same Plan 09 worktree | complete; worker released | commit `4ffdd96bd`; require unused output filename, preserve existing sentinel, 152 tests and docs gates green |
-| Plan 09 rereview round 4 | `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | same Plan 09 worktree | reviewing | full diff plus fresh/unused-output recovery workflow and all prior findings |
+| Plan 09 rereview round 4 | `task_4af7ea4cfb3f` / `ctx_98b5a07f33d4` | same Plan 09 worktree | complete; no findings; pushed; worker released | exact head `4ffdd96bd`; clean full-diff review and fresh coordinator 152-test/docs verification |
 | Plan 11 independent review | `task_7d5d4c1417a9` / `ctx_17ee05faf9e7` | same Plan 11 worktree | complete; changes required | attachment-format overclaim and duplicated patch/restore guidance |
 | Plan 11 review fix | `task_351a96e90b69` / `ctx_e398c9128731` | same Plan 11 worktree | complete; worker released | commit `e05977007`; attachment promise removed and adjacent guidance deduplicated |
 | Plan 11 re-review | `task_86a66b578544` / `ctx_3bb8017e8676` | same Plan 11 worktree | complete; no findings; worker released | exact head `e05977007`; 52 focused tests and full diff verified before PR #3459 |
@@ -109,7 +109,7 @@ state changes are outside scope.
 | Plan 15A independent review | `task_d4f4841355e2` / `ctx_467f293cf443` | same Plan 15A worktree | complete; changes required; worker released | medium: raster checks did not pin fit geometry; low: class coupling and duplicate props type |
 | Plan 15A review fix | `task_5a4afecb7d0d` / `ctx_43faac4f25eb` | same Plan 15A worktree | implementing | strengthen Cover/Contain geometry and behavioral assertions, consolidate props type, rerun raster E2E |
 | Plan 07 hosted review follow-up | `task_6e9bc84ca2d4` / `ctx_e31d0e345240` | `codex/issue-2722-postgres-docs` | no findings; pushed; worker released | commit `a7b8c4c`; five valid comments fixed, `--no-deps` removal rejected; six replies and zero unresolved threads |
-| Plan 07 late hosted fix | `task_6d0545ee43b1` / queued | same Plan 07 worktree | ready | separate image/repository update paths through log inspection; address late Greptile thread without widening lifecycle scope |
+| Plan 07 late hosted fix | `task_6d0545ee43b1` / `ctx_1d6a1e36def3` | same Plan 07 worktree | implementing | separate image/repository update paths through log inspection; address late Greptile thread without widening lifecycle scope |
 
 ## Existing PR and residual accounting
 
@@ -129,6 +129,6 @@ state changes are outside scope.
 - Plan 07: PR [#3457](https://github.com/amruthpillai/reactive-resume/pull/3457), open and intentionally unmerged;
   current head `a7b8c4cc5754c1249534d0ed8993e67e57e2cb87`; hosted checks green, approved, mergeable; one late unresolved thread queued for correction.
 - Plan 09: PR [#3458](https://github.com/amruthpillai/reactive-resume/pull/3458), open and intentionally unmerged;
-  published head `6931d2cc4a512e53dfd51575ad729bb9f6da5249` after clean re-review and fresh 152-test verification.
+  current head `4ffdd96bdda668513e26051a52c971d546e01bff` after clean re-review and fresh 152-test verification; hosted checks rerunning.
 - Plan 11: PR [#3459](https://github.com/amruthpillai/reactive-resume/pull/3459), open and intentionally unmerged;
   current head `1d0397884c2d1b31e8a723c2b2c206bdd41a1128`; all hosted checks green, approved, mergeable, zero unresolved threads.