diff --git a/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md b/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md
index 4716d757..cc2a03a4 100644
--- a/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md
+++ b/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md
@@ -306,7 +306,7 @@ Critical path ≈ 1B: **~4–6 weeks total**, matching the design estimate.
 - [x] T0.2 File dead-`IntegrationCallRequest` issue; record exclusion (28 of 29 migrate)
 - [x] T0.3 `ControlPlaneAuthInterceptor` + `CommunicationOptions.GrpcPsk` + `SitePskProvider`; gate SiteStream; PSK attached on central's streaming + pull clients
 - [x] T0.4 Rig dev keys (all 3 sites + central store seeds) + interceptor/provider/wiring tests
-- [ ] Phase 0 DoD: suite green; rig unauthenticated ⇒ `PermissionDenied`, authenticated paths work; PR merged
+- [x] Phase 0 DoD: suite green; rig unauthenticated ⇒ `PermissionDenied`, authenticated paths work; PR merged (#25, ff to `main` @ `3fa95555`; gate PASS in `2026-07-22-clusterclient-to-grpc-live-gate.md`)
 
 **Phase 1A — central control plane** (worktree, `feat/grpc-central-control`)
 - [ ] T1A.1 `central_control.proto` (7 RPCs; checked-in codegen) + `CentralControlDtoMapper` + round-trip golden tests
diff --git a/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md.tasks.json b/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md.tasks.json
index 2cef66ab..565cd9ea 100644
--- a/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md.tasks.json
+++ b/docs/plans/2026-07-22-clusterclient-to-grpc-plan.md.tasks.json
@@ -73,7 +73,7 @@
       "id": "P0.DoD",
       "phase": "0",
       "subject": "Phase 0 DoD: suite green; rig unauthenticated => PermissionDenied, authenticated paths work; PR merged",
-      "status": "in_progress",
+      "status": "completed",
       "activeForm": "Verifying the Phase 0 DoD",
       "blockedBy": [
         "T0.1",
@@ -87,7 +87,7 @@
       "id": "T1A.1",
       "phase": "1A",
       "subject": "central_control.proto (7 RPCs, checked-in codegen) + CentralControlDtoMapper + round-trip golden tests",
-      "status": "pending",
+      "status": "in_progress",
       "activeForm": "Authoring central_control.proto and its mappers",
       "blockedBy": [
         "P0.DoD"
@@ -138,7 +138,7 @@
       "id": "T1B.1",
       "phase": "1B",
       "subject": "site_command.proto (6 oneof RPCs / 28 commands) + SiteCommandDtoMapper + round-trip golden tests",
-      "status": "pending",
+      "status": "in_progress",
       "activeForm": "Authoring site_command.proto and its mappers",
       "blockedBy": [
         "P0.DoD"