diff --git a/projects/hermes-persistent-os/tasks.md b/projects/hermes-persistent-os/tasks.md
index 05ea4d0..ba819f1 100644
--- a/projects/hermes-persistent-os/tasks.md
+++ b/projects/hermes-persistent-os/tasks.md
@@ -6,8 +6,8 @@
 - [x] S4U / session 0 proof without reboot (At startup, parent = Task Scheduler)
 - [x] Gatekeeper ran `upgrade-to-s4u.ps1`
 - [x] CoS: launcher dies if wrapper dies, so a task stop or crash actually restarts the program
-- [ ] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com`
-- [ ] Do not open the web app on `100.64.0.1` until the phone works
+- [x] Phone on live tunnel `https://daughter-cards-fog-compete.trycloudflare.com`
+- [ ] Narrow Regis line: web app on `100.64.0.1`, firewall allow `100.64.0.6` only, status-check test only
 - [ ] Later: drop Leonard off admin / Highest if it can be done without another Gatekeeper prompt
 
 See `memory-systems/agent-os/04_projects/veripath/fleet-2026-09-26.md`.