diff --git a/memory-systems/agent-os/04_projects/thornhill-website/jobs/events/JOB-20260927-thornhill-closeout/003-cos-gatekeeper.md b/memory-systems/agent-os/04_projects/thornhill-website/jobs/events/JOB-20260927-thornhill-closeout/003-cos-gatekeeper.md
new file mode 100644
index 0000000..f260d56
--- /dev/null
+++ b/memory-systems/agent-os/04_projects/thornhill-website/jobs/events/JOB-20260927-thornhill-closeout/003-cos-gatekeeper.md
@@ -0,0 +1,35 @@
+---
+job: JOB-20260927-thornhill-closeout
+from: cos
+to: all
+type: gatekeeper
+at: 2026-09-27T12:07:00-07:00
+live_url: https://thornhillconstruction.net/
+live_read_at: 2026-09-27T12:07:33-07:00
+---
+
+# Gatekeeper report: request-a-callback form now on the homepage
+
+Who / where / when: Anthony (Gatekeeper), relayed to CoS in CoS chat, 2026-09-27 12:07 PT.
+
+> "form is there now"
+
+Context: the 11:33:44 PT CoS live read found the Contact Form 7 'Request a callback' form only on /contact/, not on the homepage (punchlist A1). Events 001/002 cover the /contact/ form test that landed in Larry's inbox.
+
+Surface: https://thornhillconstruction.net/ (bare https, canonical).
+
+CURRENT (CoS live read 2026-09-27 12:07:33 PT, curl, read-only, cache-busting ?cb= query, from Anthony's desktop DESKTOP-81CBTV2; HTTP 200, 0 redirects, X-Litespeed-Cache: miss):
+- Homepage now has 1 <form>: Contact Form 7, form id 33, unit wpcf7-f33-p11-o1 (the same CF7 form as /contact/, embedded on the home page, post 11), action "/#wpcf7-f33-p11-o1", aria-label "Contact form".
+- Fields: your-name 'Your name (required)', your-phone 'Phone (required)', your-email 'Email (required)', your-message 'Anything we should know? (optional)'. Submit button: 'Request a callback'.
+- Where it sits: last section before the footer, section id="contact", heading 'Contact Larry', under 'Call 530-306-4629', larry@thornhillconstruction.net, 'Placerville, CA · CSLB #336956'.
+- /contact/ still has its form (wpcf7-f33-p132-o1, same fields, submit 'Request a callback').
+- Homepage HTML sha256 (canonical URL, no query): fc15543da61670d1ecf01eca54de2758678a58e054b222fe119396015baa8935. The ?cb= copy hashes differently (ac1709f5...) only because of the query string and the LiteSpeed 'Page cached ... on' timestamp comment; the page body is otherwise identical.
+- CoS did not submit anything.
+
+Decision:
+- Homepage now carries the CF7 'Request a callback' form (same form 33 as /contact/), per CoS live read 12:07:33 PT. Presence verified live.
+- Delivery of a homepage submission was not tested by CoS (read-only). Events 001/002 cover the same form 33 on /contact/ reaching Larry's inbox.
+- A1 still open: phone 530-306-4629 and email larry@thornhillconstruction.net reaching Larry.
+- Job state unchanged (open).
+
+Evidence: this event file; events 001/002; CoS live read above.