diff --git a/agent-builder/.claude/context.md b/agent-builder/.claude/context.md
index 593c399..ba70bd0 100644
--- a/agent-builder/.claude/context.md
+++ b/agent-builder/.claude/context.md
@@ -452,15 +452,23 @@ Build, test, and push both builder agents to production. Work as long as it take
 - Automation audit (74 items) now UNBLOCKED — both Jenkins + Hermes deployed
 - Primary server: qbittorrent using 8.1GB RAM (abnormal — memory leak suspected), swap 7.6/8.2GB full
 
+### 2026-06-26 Sprint Day 10 session 3 facts
+- ids 157-160 COMPLETE ✅ — service-registry.json (33 services), standard Jenkinsfile template, 7 services version-pinned, 24 standard Jenkins jobs created (34 total)
+- readJSON → readFile+JsonSlurper fix (Pipeline Utility Steps plugin not installed in Jenkins)
+- proxy-caller-key mismatch: Jenkins key not in PROXY_CALLERS env var of secrets-proxy; jenkins added to proxy/callers in Vault; redeploy needed → id=163
+- sudo-bridge sandbox IP binding bug: server-01 compose binds 192.168.1.88 (primary IP) → id=164
+- Jellyfin Jenkins job failing pending id=163; full pipeline untested end-to-end
+- Cookie jar required for Jenkins crumb across urllib requests
+- Claude Max upgrade needed — daily token limits hit during background agent sessions
+
 **Next session first tasks (in order):**
-1. Hermes config change: add hermes-cli to platform_toolsets.telegram (background agent)
-2. Create container-health-sweep/SKILL.md + semantic-recall/SKILL.md (background agent)
-3. id=154 Domain playbooks → Gitea (unblocks id=155)
-4. id=157 Jenkins service-registry.json in boilerplates
-5. id=158 Jenkins standard-redeploy Jenkinsfile template
-6. id=155 Per-automation required_playbooks precision pass
+1. id=163 — Redeploy secrets-proxy to activate Jenkins caller key (BLOCKER for all Jenkins Promote-to-Production)
+2. id=164 — Fix sudo-bridge sandbox compose IP on server-01
+3. Re-run jellyfin Jenkins job (verify full pipeline end-to-end after id=163)
+4. id=161 — Hermes→Jenkins trigger (needs id=163 first)
+5. Hermes config: add hermes-cli to telegram toolset
+6. id=154 Domain playbooks → Gitea
 7. Build id=24 Agent Builder Agent + id=67 N8N Builder Agent
-8. Automation audit background agent (74 items — Jenkins/Hermes fit re-evaluation)
 
 ## Update instructions
 Update at the end of every agent-builder session. Keep agent status, key decisions, and prereq checklist current.