diff --git a/docs/plans/workflow-system.md b/docs/plans/workflow-system.md
index 680ab12..e9db2d7 100644
--- a/docs/plans/workflow-system.md
+++ b/docs/plans/workflow-system.md
@@ -30,7 +30,7 @@ and add no abstraction without a demonstrated repeated need.
 
 | Repository | Branch | Commit | Purpose |
 | --- | --- | --- | --- |
-| NixOS configuration | `chore/workflow-system` | `d7dcc7b` | Discovery and execution baseline |
+| NixOS configuration | `chore/workflow-system` | `41bc61b` | Discovery, paths, Git identity, and Codex defaults |
 
 ## Human actions
 
@@ -63,4 +63,10 @@ and add no abstraction without a demonstrated repeated need.
 - Shared Codex defaults and MCP endpoints are generated at
   `/etc/codex/config.toml`; Context7 reads its header from the environment. The
   unused generic `~/.config/mcp/mcp.json` owner is removed on next activation.
+- Removed redundant legacy-path trust entries from the current Codex config;
+  the existing trusted home scope covers the moved repositories.
+- Bruno's transitional OpenAPI reference now follows the archived management
+  repository until the HTTP pilot retires or retains Bruno.
+- Post-move repository IDs, remotes, dirty counts, and the registered sensor
+  worktree match the pre-move inventory. The Nix flake still evaluates.
 - Run independent pilots in parallel, but gate every retirement separately.