diff --git a/docs/plans/2026-08-18-followups-and-tickets.md b/docs/plans/2026-08-18-followups-and-tickets.md
index dda175c..6a7bbb1 100644
--- a/docs/plans/2026-08-18-followups-and-tickets.md
+++ b/docs/plans/2026-08-18-followups-and-tickets.md
@@ -511,12 +511,26 @@ Notable findings made along the way:
other's child nodes (MSB4166) — `-m:1` avoids it; ssh can transiently refuse with "Too
many authentication failures" under agent concurrency (back off and retry).
-Follow-ups recorded, not started (deliberately small):
+Follow-ups recorded, not started (deliberately small) — *first two closed 2026-08-18 on
+`feat/sweep-reread-tag-summary`*:
- The `fca978d` sweep re-read (above) — the one genuinely ticket-worthy item.
+ *Closed in `f82dac1`: a mechanical pre-pass narrowed the sweep's 1,383 deletions to
+ 68 files / 816 residual prose lines; a judged review of every one found 17 collateral
+ deletions across 10 files (rationale prose with no surviving equivalent — SessionManager
+ metrics invariants, HubTokenService hollow-token guard, AcknowledgeAlarm routing
+ remarks, LmxSubtagAlarmSource unsecured-write/idempotency notes, WnWrapAlarmConsumer's
+ WIN-911 precedent, DashboardSessionAdminService error-boundary catches,
+ WorkerPipeSession factory-null throw, three test-design rationales) — all restored,
+ markers left stripped. Everything else flagged verified benign (``
+ resolves to equal-or-richer interface docs, or the substance survives relocated).
+ Verified: NonWindows slnx 0W/0E, touched gateway test classes 65/65; windev worker
+ x86 build 0W/0E, worker suite 524/11/0.*
- `DashboardGroupTagMapping`'s class-level `` still describes the lookup as
"full DN first, leading-RDN fallback" — accurate mechanics, but it could point at the
short-name-keys consequence the inline comment now records.
+ *Closed in `4b6f907`: the summary now states full-DN keys can never match and points
+ at the lookup comment in `MapGroupsToTags`.*
- wwtools `mxa read` human-readable formatter throws `RuntimeBinderException` on a failed
read (`ReadCommand.cs:137`); `--llm-json` works. Different repo, noted here so it isn't
lost.