diff --git a/agent-builder/.claude/context.md b/agent-builder/.claude/context.md
index d0b3108..3c69413 100644
--- a/agent-builder/.claude/context.md
+++ b/agent-builder/.claude/context.md
@@ -1,11 +1,45 @@
 project_name: agent-builder
 # Agent Builder — Session Context
 
-## What this project does
-Design, build, and test autonomous N8N agents on server-01 sandbox before any production promotion.
-First two agents: Agent Builder Agent + N8N Builder Agent.
+> **⚠️ READ THIS BLOCK ONLY. Everything below "## Architecture" is APPEND-ONLY HISTORY, oldest
+> first, and much of it is superseded.** This file is injected into every session by the
+> session-start hook, so treat the rest as an archive to grep, not context to absorb. Do not infer
+> current state from it — it is 568 lines of June sprint-day facts with the oldest on top.
+> Fix pending: prune it (task #192). See [[feedback-superseding-records-need-a-pointer]].
 
-## Scheduled work (2026-06-16, running behind — started ~6:38 PM)
+## CURRENT STATE (updated 2026-07-14)
+
+**What this project actually is now:** the home for **Agent-Sudo** + **Constrained Autonomy (CA)** —
+the system that removes the user's rubber-stamp permission tax by replacing approval gates with
+enforced deterministic constraints. The original N8N Agent Builder / N8N Builder Agent framing below
+is **historical**; those are not the active work.
+
+**Live right now:**
+- **Agent-Sudo is deployed and ENFORCING on both hosts** (#145 closed 2026-07-14).
+  `SUDO_MD_VERIFY_ENFORCE=true`, signed digest `38eca778abb0..`, daemon `NRestarts=0`.
+- **CA fast-path hook v2.1** live at `/opt/appdata/docker/.claude/hooks/security-enforcement.py`.
+- **Vault: production = primary `192.168.1.88:8200`.** server-01 is only a CLIENT of it. The sandbox
+  Vault on server-01 is `:8201`. **Port 8200=prod / 8201=sandbox is the fastest tell** — never infer
+  "server-01 is involved, therefore sandbox Vault." That inversion caused a real near-miss.
+- **Design decisions D1–D10 + D-CB1–D-CB4 are LOCKED.** The design record outranks any task title —
+  read `agent_builder/agent_sudo_design_decisions.md` before re-litigating.
+
+**Next session (Wed 2026-07-15), in order:** **#174** (rotate the exposed root-equivalent token AND
+narrow `claude-policy` — rotation alone re-arms the hole) → **#149** (wire tier-2/3 + circuit-breaker,
+with **#173** fail-open/fail-closed folded in) → **#128** secrets-proxy (remove the ntfy approval
+gate) → **#147/#146** (CA P2–P5 + primary cutover 8084→8082).
+
+**Then:** Thu 07-16 qui/qbit memory leak (#176) + media_pipeline (#177) · Fri 07-17 clear the runway
+(#178) · **Mon 07-20 resume business development (#179) — digital businesses deployed by Fri 07-24.**
+
+Full detail lives in the memory files, which are authoritative over this file:
+`session_last_summary`, `project_near_term_schedule_jul2026`, `project_two_horizon_operating_model`.
+
+---
+
+# ————— HISTORY BELOW THIS LINE (June 2026 →, oldest first, largely superseded) —————
+
+## Scheduled work (2026-06-16, running behind — started ~6:38 PM) — SUPERSEDED, historical
 1. Vision Alignment Grill-Me — Agent Builder + N8N Builder vision + testing methodology
 2. Agent Builder Agent — Deploy + Test (server-01 sandbox)
 3. N8N Builder Agent — Deploy + Test (server-01 sandbox)