diff --git a/deploy/INVENTORY.md b/deploy/INVENTORY.md
index 18fa99d..926fb4c 100644
--- a/deploy/INVENTORY.md
+++ b/deploy/INVENTORY.md
@@ -41,7 +41,7 @@ The host must be inventoried before any deployment. See `docs/DEPLOYMENT.md`.
 |---|---|
 | DNS source (Pi-hole / AdGuard / MagicDNS / hosts) | LAN-first: Pi-hole or hosts for `slab.local` → `192.168.1.202`. Tailscale MagicDNS remains for SSH (`ubudual5060`). |
 | A record: `APP_HOSTNAME` → `APP_HOST` | `slab.local` → `192.168.1.202` (LAN). Optional Tailscale alias later. |
-| Reachable from phone on LAN? | **HTTP OK** on `127.0.0.1:18080` (frontend stub), `127.0.0.1:18081` (FastAPI). TBD from phone (phone CA / hosts entry needed). |
+| Reachable from phone on LAN? | **HTTP OK** on `192.168.1.202:18080` (frontend), `192.168.1.202:18081` (FastAPI `/api/health → ok`). Caddy `192.168.1.202:80` → 308 redirect to HTTPS. All bound to `0.0.0.0`. |
 | Reachable from phone on Tailscale? | TBD after deploy (path intended) |
 
 ## Volumes and backup
@@ -56,7 +56,7 @@ The host must be inventoried before any deployment. See `docs/DEPLOYMENT.md`.
 
 | Check | Pass? |
 |---|---|
-| `curl -k https://${APP_HOSTNAME}/api/health` | **HTTP OK** — `curl http://127.0.0.1:18081/api/health` returns `{"status":"ok","version":"0.1.0","woo_reachable":false}`. HTTPS handshake fails due to Go/OpenSSL 3.5.5 TLS incompatibility (internal_error alert); HTTP used as interim. |
+| `curl http://${APP_HOST}/api/health` (LAN) | **PASS** — `curl http://192.168.1.202:18081/api/health` returns `{"status":"ok","version":"0.1.0","woo_reachable":false}` from LAN. Binds changed from `127.0.0.1` to `0.0.0.0`. |
 | Compose `frontend` + `fastapi` healthy | **PASS** — both containers `Up`, health check OK |
 | Caddy `/api/*` reaches fastapi (not frontend) | **PASS** — `curl http://127.0.0.1/api/health` → `308` redirect to HTTPS; HTTP direct to `127.0.0.1:18081` works |
 | AES settings round-trip (PUT + GET) | **PASS** — woo credentials persist, woo_create_status persists |
@@ -68,5 +68,5 @@ The host must be inventoried before any deployment. See `docs/DEPLOYMENT.md`.
 | Role | Name | Date |
 |---|---|---|
 | Inventory draft (SSH + ports + hostname + store) | Main Cut | 2026-09-06 PT |
-| Inventory complete (Gate B execute) | grokbot_ty | 2026-09-07 PT |
+| Inventory complete (Gate B execute) | grokbot_ty | 2026-09-07 PT · bind fix pushed b4a7023 |
 | Ty Gate B (optional) | | |