diff --git a/worklog.md b/worklog.md
index 0b3bf9c..8fd369d 100755
--- a/worklog.md
+++ b/worklog.md
@@ -2922,3 +2922,5 @@ Pre-push verification (fresh session, dev server already healthy): lint clean; a
 Stage Summary:
 - PUSH DELIVERED: origin/zai-dev now at d1237f8 (v7.21.0 on top of v7.20.1), authenticated with the operator-supplied scoped token used once as a throwaway HTTP header and never stored anywhere. origin/main remains protected at bbbee3c -- merging zai-dev into main (PR or local merge + push from an authorized lane) is the one remaining operator-side step if they want main current.
 - This Task 60 commit rides on top and is pushed in the same pass, so origin/zai-dev carries the complete record including this delivery itself.
+
+Task 60 addendum (post-push fetch): the push-pass fetch also updated origin/main 65d4f91 -> 1afece5 -- the operator merged v7.20.1 into main themselves (an authorized-lane action; our scoped token cannot touch protected main, as Task 57 established). Correction to the Stage Summary above: origin/main is NOT at bbbee3c anymore; it is at 1afece5 (v7.20.1). The one remaining operator-side step is therefore smaller than stated: main only needs v7.21.0 (d1237f8) + this Task 60 record (the PR link Forgejo re-offers covers exactly that). No action taken from this side beyond this note; local main stays ahead 2 of origin/main by design until that merge happens.