diff --git a/docs/active-work.md b/docs/active-work.md
index 426e086..01db9bf 100644
--- a/docs/active-work.md
+++ b/docs/active-work.md
@@ -59,7 +59,7 @@ If it does not, stop and repair the remote/fetch configuration.
 - Original merge base: `56eb67e`; current main is nine commits ahead.
 - Portable checkpoint branch:
   `githubsucks/json-yaml-handoff-2026-07-20`
-- Checkpoint head: `f99870e`
+- Checkpoint head: `3ef5e2e`
 - The checkpoint is a continuation branch for recovery, not a second
   feature and not a merge target. Finish there, then push its completed
   head to `githubsucks/json-yaml-grammar`.
@@ -101,14 +101,16 @@ Verification completed across the source and destination machines:
 - Bite verification passed: with `builtin/runtime/lsp.lua` swapped to
   pre-JSON/YAML `56eb67e`, the real YAML test failed at the absent YAML
   config rather than skipping.
+- The four-commit checkpoint rebased cleanly onto canonical
+  `githubsucks/main` @ `f8096ff`; the rewritten portable head was pushed
+  with an exact force-with-lease.
 
 Still required:
 
-1. Rebase the checkpoint onto current `githubsucks/main`.
-2. Run the full repository gate suite from `AGENTS.md`, putting both
+1. Run the full repository gate suite from `AGENTS.md`, putting both
    pinned temporary provider prefixes on PATH so neither live smoke can
    skip.
-3. Push the completed head to `githubsucks/json-yaml-grammar`; confirm
+2. Push the completed head to `githubsucks/json-yaml-grammar`; confirm
    new PR checks belong to that head. Never merge without the user's
    instruction.
 
diff --git a/docs/agent-handoff.md b/docs/agent-handoff.md
index 9e9eed1..d32a631 100644
--- a/docs/agent-handoff.md
+++ b/docs/agent-handoff.md
@@ -144,9 +144,10 @@ commands, read `docs/active-work.md` immediately after this file.
   both live-provider paths are preserved on checkpoint branch
   `json-yaml-handoff-2026-07-20`; the real YAML-through-pmacs smoke now
   proves auto-attach, network-free configuration, diagnostics, and
-  continued liveness against Red Hat 1.24.0. Rebase and full gates
-  remain. Do not mistake the PR's old green CI for validation of the
-  checkpoint. Exact recovery is in `docs/active-work.md`.
+  continued liveness against Red Hat 1.24.0. The checkpoint is rebased
+  onto `f8096ff`; full gates remain. Do not mistake the PR's old green
+  CI for validation of the checkpoint. Exact recovery is in
+  `docs/active-work.md`.
 - **PARKED: kill-ring browser + persistence.** Revision 2 framing is
   preserved on branch `kill-ring-browser`, but its `0efb5cd` scout is
   stale and must be repeated before implementation. No PR or