diff --git a/DESIGN.md b/DESIGN.md
index 734991f9..ed739ce0 100644
--- a/DESIGN.md
+++ b/DESIGN.md
@@ -174,7 +174,7 @@ The **foundation milestone** is complete. Avalonia now implements a substantial
 | X4 | Use `Environment.SpecialFolder.LocalApplicationData` for the data folder | Done; stores and checkpoints already use the OS-specific LocalApplicationData path, preserving the existing Windows `%LOCALAPPDATA%\Codev` location | Windows keeps its existing folder untouched; nothing is migrated silently |
 | X5 | Per-OS "open folder" (`explorer` / `open` / `xdg-open`); reword the Git-not-found message so it is not Windows-specific | Implemented; command selection has portable tests and Avalonia builds in the hosted 3-OS matrix; per-OS interaction checks remain | No Windows-only wording or calls remain outside the shell and folder abstractions |
 | X6 | Avalonia UI and cross-platform delivery | In progress · Release 1 (`v2026.10.08-89bd54e`) shipped for Windows x64, Linux x64, macOS Apple silicon, and Intel. Main commit `b0fa0fd` passed Windows/Linux/macOS CI [#37864409159](https://github.com/jay23606/codev/actions/runs/37864409159) and packaged interaction checks on all four RIDs [#37864409087](https://github.com/jay23606/codev/actions/runs/37864409087), including Windows UI Automation, Linux Xvfb, and macOS window-server checks. The Pin menu/persistence regression also passed headless and packaged tests [#37736169952](https://github.com/jay23606/codev/actions/runs/37736169952) [#37736169941](https://github.com/jay23606/codev/actions/runs/37736169941); the earlier local UIA mouse discrepancy was not confirmed as a product defect. Clean-machine installation, physical desktop interaction, native screen-reader speech, and 200% scaling remain unchecked; see [`docs/avalonia-smoke-checklist.md`](docs/avalonia-smoke-checklist.md) | Complete or explicitly defer remaining release checklist items without treating hosted tests as native/manual validation |
-| X7 | CI matrix and per-OS publishing (`win-x64`, `osx-arm64`, `osx-x64`, `linux-x64`) | In progress · The tag workflow published Release 1 `v2026.10.08-89bd54e`; the release page contains all eight app and CLI archives. Exact main checks passed on `b0fa0fd`: cross-platform CI [#37864409159](https://github.com/jay23606/codev/actions/runs/37864409159) and the four-RID package preview [#37864409087](https://github.com/jay23606/codev/actions/runs/37864409087). All four README latest desktop-download URLs returned HTTP 200 after redirecting to Release 1 on 2026-10-09; recheck after the next tag. Release 2 is targeted for October 13. Clean-machine installation remains unverified, and packages are unsigned. | Complete Release 2 validation, recheck latest-download redirects, and verify clean-machine installation while keeping platform limitations visible |
+| X7 | CI matrix and per-OS publishing (`win-x64`, `osx-arm64`, `osx-x64`, `linux-x64`) | In progress · The tag workflow published Release 1 `v2026.10.08-89bd54e`; the release page contains all eight app and CLI archives. Exact main checks passed on `b0fa0fd`: cross-platform CI [#37864409159](https://github.com/jay23606/codev/actions/runs/37864409159) and the four-RID package preview [#37864409087](https://github.com/jay23606/codev/actions/runs/37864409087). All eight README latest-download URLs (desktop and CLI for four RIDs) returned HTTP 200 on 2026-10-09; recheck after the next tag. Release 2 is targeted for October 13. The packaged preview runs by manual dispatch or on version tags, not on PRs; exact-head four-target Release 2 candidate validation is still planned. Clean-machine installation remains unverified, and packages are unsigned. | Complete Release 2 validation, recheck latest-download redirects, and verify clean-machine installation while keeping platform limitations visible |
 
 - **X7 current-head workflow validation (2026-10-02).** At `1060992`, [Windows CI #37085144777](https://github.com/jay23606/codev/actions/runs/37085144777) passed the portable, Avalonia headless, and Windows UI/credential-vault jobs across Windows, Linux, and macOS. [Desktop preview #37085144781](https://github.com/jay23606/codev/actions/runs/37085144781) passed app and CLI launch/package checks for win-x64, linux-x64, osx-arm64, and osx-x64. The tag-only publish job was skipped as expected for the PR; no Node 20 action-runtime deprecation warnings remained. Manual native UI and clean-install checks remain open.
 
diff --git a/docs/release-plan-2026-10.md b/docs/release-plan-2026-10.md
index 0c8f1d27..e666e52b 100644
--- a/docs/release-plan-2026-10.md
+++ b/docs/release-plan-2026-10.md
@@ -40,11 +40,11 @@ The Release 1 ledger leaves 65 manual workflows open, including native macOS/Lin
 
 ## Release 2: early stabilization
 
-**Release 2 checkpoint (verified 2026-10-09 at main `598d020`; product code through PR #62).** Product PRs #41–#62 are merged; PRs #63–#72 update release notes, the release checkpoint, README, and validation evidence. Recent product changes include broader Auto execution with exact Deny rules, persisted sidebar ordering, scoped profiles, transcript search, and hosted-key reconnect preferences. PR #62 exact-head Windows/Linux/macOS CI [#37991522654](https://github.com/jay23606/codev/actions/runs/37991522654) and the four-target packaged preview [#37991522656](https://github.com/jay23606/codev/actions/runs/37991522656) passed. That preview ran the reported destructive-plus-Git command in Auto and verified an exact Deny; Linux and both macOS packages also passed their Auto/local-chat interaction checks. PR #70 adds an executor-level regression proving a saved exact Deny blocks its command in Auto while a harmless textual variation runs without approval; its cross-platform PR checks [#37998251504](https://github.com/jay23606/codev/actions/runs/37998251504) and post-merge CI [#37998488396](https://github.com/jay23606/codev/actions/runs/37998488396) passed. PRs #71 and #72 refreshed the release checkpoint and recorded the regression evidence; their post-merge Windows/Linux/macOS CI runs [#37999125809](https://github.com/jay23606/codev/actions/runs/37999125809) [#37999721983](https://github.com/jay23606/codev/actions/runs/37999721983) passed. These were documentation/test-only merges, so packaged interaction previews were skipped. No local packaged smoke was run. Keep local packaged smokes off during ordinary work; dispatch the preview once against the frozen October 11 candidate, and use a local smoke only if a release-critical interaction remains uncovered. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below.
+**Release 2 checkpoint (verified 2026-10-09 at main `7cb7d2b`; product code through PR #77).** Subsequent product changes include the exact-Deny Auto regression, persisted sidebar reorder, profile and hosted-key fixes, and a clarification in the Auto/MCP tooltips when saved MCP permissions cannot be read. PR #77's Windows/Linux/macOS CI [#38003412218](https://github.com/jay23606/codev/actions/runs/38003412218) and post-merge CI [#38003676335](https://github.com/jay23606/codev/actions/runs/38003676335) passed. PR #74 added the eight-archive prepublish gate; PR #76 changed the release preview workflow to run packaged interaction checks only on manual dispatch or version-tag pushes. Their PR CI [#38001121514](https://github.com/jay23606/codev/actions/runs/38001121514) [#38002345137](https://github.com/jay23606/codev/actions/runs/38002345137) and post-merge CI [#38001372222](https://github.com/jay23606/codev/actions/runs/38001372222) [#38002651235](https://github.com/jay23606/codev/actions/runs/38002651235) passed. The last exact-head packaged preview remains PR #62 [#37991522656](https://github.com/jay23606/codev/actions/runs/37991522656); run one new four-target preview by manual dispatch against the frozen October 11 candidate. Do not run packaged previews for ordinary PRs or local desktop smokes during routine work. Clean-machine installation, physical accessibility, and native macOS/Linux interaction remain explicit limitations. Keep the October 11 freeze and October 13 Release 2 target below.
 
-Target Release 2 for **Tuesday, October 13, 2026** (Day 5 after the October 8 publication; acceptable window: Day 3–5). On October 9–10 (Days 1–2), collect install reports, triage reproducible issues, and fix release blockers. On October 11 (Day 3), freeze the candidate and run exact-head Windows/Linux/macOS CI plus all four packaged desktop/CLI checks. The desktop-preview workflow runs for version tags, explicit candidate dispatches, and pull requests not limited to the skipped paths. PRs limited to Markdown documentation, test projects, or the release-preview workflow still run Windows/Linux/macOS CI but skip the four packaged interaction smokes. Regular merges to `main` do not repeat the packaged previews. Dispatch that workflow once against the frozen main commit before tagging. Use a local desktop smoke only if a release-critical interaction is not covered by hosted UI checks and focused tests; routine local runs stay disabled. Publish on October 12–13 only if exact-head checks pass, update the release notes for verified changes and remaining limitations, and confirm all eight README latest-download links. If a blocker moves the candidate, move Release 2 to Day 3–5 after the verified fix.
+Target Release 2 for **Tuesday, October 13, 2026** (Day 5 after the October 8 publication; acceptable window: Day 3–5). On October 9–10 (Days 1–2), collect install reports, triage reproducible issues, and fix release blockers. On October 11 (Day 3), freeze the candidate and run exact-head Windows/Linux/macOS CI plus all four packaged desktop/CLI checks by manually dispatching the desktop-preview workflow once against the frozen main commit. The workflow runs only on manual dispatch and version-tag pushes; pull requests and ordinary merges use the Windows/Linux/macOS CI workflow without packaged interaction smokes. Use a local desktop smoke only if a release-critical interaction remains uncovered by hosted checks and focused tests; routine local runs stay disabled. Publish on October 12–13 only if exact-head checks pass, update the release notes for verified changes and remaining limitations, and confirm all eight README latest-download links. If a blocker moves the candidate, move Release 2 to Day 3–5 after the verified fix.
 
-The latest full four-platform candidate validation (`e729b85`, checked October 9) includes the post-Release 1 accessibility, MCP-recovery/activity, and OpenCode V2 scoped-profile changes. Exact-head Windows/Linux/macOS CI [#37885220964](https://github.com/jay23606/codev/actions/runs/37885220964) and all four packaged previews [#37885221048](https://github.com/jay23606/codev/actions/runs/37885221048) passed. PR #35 then removed the duplicate four-platform package preview from regular pushes to `main`; its PR-head CI and four-RID previews passed [#37885851748](https://github.com/jay23606/codev/actions/runs/37885851748) [#37885851767](https://github.com/jay23606/codev/actions/runs/37885851767), and the merge commit `4208ac1` passed Windows CI [#37886270841](https://github.com/jay23606/codev/actions/runs/37886270841). The prior main CI run had one intermittent Linux headless review-test failure; the targeted rerun passed before the test was made layout-synchronous in PR #34. Treat the merged changes as the accumulated Release 2 scope; from this point, focus on stabilization rather than adding more features. [`docs/release-notes.md`](release-notes.md) describes the merged changes and retains the outstanding native accessibility and clean-install limitations. Recheck it against the exact release commit before tagging.
+**Earlier Release 2 candidate evidence (October 9, code head `e729b85`).** The four-target preview [#37885221048](https://github.com/jay23606/codev/actions/runs/37885221048) passed before the later Release 2 fixes. Subsequent PR #35 removed packaged previews from regular pushes to `main`; PR #76 later removed them from pull requests as well. This evidence is historical and does not validate current main `7cb7d2b`; the exact current candidate still needs the one manual four-target preview scheduled above. The prior main CI's intermittent Linux headless review-test failure was fixed layout-synchronously in PR #34. Treat Release 2 scope as stabilization and recheck [`docs/release-notes.md`](release-notes.md) against the exact release commit before tagging.
 
 **Post-Release-1 Auto and sidebar fixes (2026-10-09).** PR #38 explains in the command-review UI when unreadable saved permission data forces a fail-closed Ask fallback; its Windows/Linux/macOS CI [#37889002924](https://github.com/jay23606/codev/actions/runs/37889002924) and four-RID package preview [#37889002909](https://github.com/jay23606/codev/actions/runs/37889002909) passed. PR #39 adds persisted drag-reordering within Pinned and Recents; its Windows/Linux/macOS CI [#37943255278](https://github.com/jay23606/codev/actions/runs/37943255278) and four-RID preview [#37943255316](https://github.com/jay23606/codev/actions/runs/37943255316) passed. Both PRs are merged into `main` at `be87c8c`, and post-merge Windows/Linux/macOS CI [#37944018045](https://github.com/jay23606/codev/actions/runs/37944018045) passed. These changes are now included in the Release 2 draft notes. The sidebar change was a user-requested exception to the feature freeze; resume stabilization-only scope after this documentation update.