diff --git a/CLAUDE.md b/CLAUDE.md
index c8f4de1..057d215 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -125,7 +125,8 @@ dotnet ef database update --project DeepDrftWeb.Services --startup-project DeepD
 
 All projects load secrets via `CredentialTools.ResolvePathOrThrow()` from gitignored `environment/` files:
 
-- `DeepDrftWeb/appsettings.json`: Logging and URL config. Secrets loaded from `environment/apikey.json` (DeepDrftContent API key), `environment/connections.json` (SQL and Auth connection strings), `environment/authblocks.json` (AuthBlocks settings).
+- `DeepDrftWeb/appsettings.json`: Logging and URL config. Secrets loaded from `environment/connections.json` (SQL connection string).
+- `DeepDrftManager/appsettings.json`: Logging and URL config. Secrets loaded from `environment/apikey.json` (DeepDrftContent API key), `environment/connections.json` (SQL and Auth connection strings), `environment/authblocks.json` (AuthBlocks settings).
 - `DeepDrftContent/environment/filedatabase.json`: FileDatabase vault path. Loaded via CredentialTools.
 - `DeepDrftContent/environment/apikey.json`: API key. Loaded via CredentialTools (not in repo).
 - `DeepDrftCli/environment/connections.json`: CLI config (`ConnectionString`, `VaultPath`). Loaded via CredentialTools.
diff --git a/PLAN.md b/PLAN.md
index 4f8ef01..13c7d74 100644
--- a/PLAN.md
+++ b/PLAN.md
@@ -14,7 +14,7 @@ The public site and the CMS are being split into two independent Blazor applicat
 
 Supersedes the host-shape pieces of `CMS-PLAN.md §2`; the CMS feature waves in `CMS-PLAN.md` survive unchanged and move to the new host.
 
-Phase 1 (`DeepDrftManager` host creation) landed. Phase 2 (strip AuthBlocks from DeepDrftWeb) and Phase 3 (DeepDrftShared.Client RCL extraction) are Wave 2 — can run in parallel.
+**Phases 1, 2, and 3 landed (Wave 2):** `DeepDrftManager` host created, AuthBlocks stripped from `DeepDrftWeb`, `DeepDrftShared.Client` RCL extracted. Phase 4 (rename `DeepDrftWeb` → `DeepDrftPublic`) is the next wave.
 
 ---
 
diff --git a/design/TWO-APP-SPLIT.md b/design/TWO-APP-SPLIT.md
index d424289..414909d 100644
--- a/design/TWO-APP-SPLIT.md
+++ b/design/TWO-APP-SPLIT.md
@@ -352,6 +352,8 @@ The current `MainLayout.razor` (`<div>@Body</div>` one-liner) is unshippable, bu
 
 **Exit criterion:** Public site (`DeepDrftWeb` still by its old name) renders home page with chrome, prerenders correctly, no hangs. CMS continues to work from `DeepDrftManager`. The hosts run side-by-side.
 
+**Landed:** merged to dev
+
 **Phase 3: Extract `DeepDrftShared.Client` (optional, can run in parallel with 2).**
 
 - New RCL `DeepDrftShared.Client`.
@@ -360,6 +362,8 @@ The current `MainLayout.razor` (`<div>@Body</div>` one-liner) is unshippable, bu
 
 **Exit criterion:** Both apps render `TrackCard` from the shared RCL. Visual parity confirmed.
 
+**Landed:** merged to dev
+
 **Phase 4: Rename `DeepDrftWeb` → `DeepDrftPublic`, `DeepDrftWeb.Client` → `DeepDrftPublic.Client`.**
 
 - Project file renames, namespace renames, csproj reference updates, solution file edits.