diff --git a/memory-systems/agent-os/04_projects/veripath/status.md b/memory-systems/agent-os/04_projects/veripath/status.md
index 219ab70..62fa362 100644
--- a/memory-systems/agent-os/04_projects/veripath/status.md
+++ b/memory-systems/agent-os/04_projects/veripath/status.md
@@ -3,7 +3,9 @@
 **Core business:** Human-supervised verification service for local businesses to prevent silent customer loss.
 
 **Fleet snapshot (2026-09-26):** `04_projects/veripath/fleet-2026-09-26.md`
-Hermex live. Web app on `127.0.0.1:8787`. Forwarder on `100.64.0.1:8787`. Regis `/health` 200. Local-trust closed. Infra slice is done enough. Next is VeriPath work, not more networking.
+Hermex live. Web app on `127.0.0.1:8787`. Forwarder on `100.64.0.1:8787`. Regis `/health` 200. Local-trust closed. Infra slice is done enough.
+
+**Mailbox:** `04_projects/veripath/regis-cos.md` — Regis↔CoS append-only. Write test pending. CoS Gitea commits may show author `Ty`; content is signed CoS. That is not an invite to Ty the person.
 
 ## Current Operating Mode (NOW)