diff --git a/agent-builder/.claude/context.md b/agent-builder/.claude/context.md
index 3c69413..8b9fab9 100644
--- a/agent-builder/.claude/context.md
+++ b/agent-builder/.claude/context.md
@@ -7,13 +7,24 @@ project_name: agent-builder
 > current state from it — it is 568 lines of June sprint-day facts with the oldest on top.
 > Fix pending: prune it (task #192). See [[feedback-superseding-records-need-a-pointer]].
 
-## CURRENT STATE (updated 2026-07-14)
+## CURRENT STATE (updated 2026-07-15)
 
 **What this project actually is now:** the home for **Agent-Sudo** + **Constrained Autonomy (CA)** —
 the system that removes the user's rubber-stamp permission tax by replacing approval gates with
 enforced deterministic constraints. The original N8N Agent Builder / N8N Builder Agent framing below
 is **historical**; those are not the active work.
 
+**Model/effort: Opus 4.8 / MEDIUM** — settled 2026-07-15. Bake-off **closed**, Sonnet arms
+**cancelled**, per-task bake-off logging **retired**. Billing is hard-capped (**>$20/mo
+impossible**), so cost is not a model-selection input; Opus's real cost is more frequent Pro
+daily-limit hits, an explicitly accepted trade. **Do not propose Sonnet; do not re-raise cost.**
+
+**⚠️ TASK DESCRIPTIONS AND HANDOFFS HERE DECAY — CHECK THE ARTIFACT BEFORE DOING THE WORK.**
+On 2026-07-15 this bit twice in one session: #149's "HAZARD: delete playbook_agent_sudo_phases" was
+already done the night before, and `session_handoff.md` was asserting a **false** security alarm plus
+a **dead** root token as live, into every session, for 3 days. Prune = **#192**; recurring guard =
+`automation_ideas` **id=92**. See [[feedback-superseding-records-need-a-pointer]].
+
 **Live right now:**
 - **Agent-Sudo is deployed and ENFORCING on both hosts** (#145 closed 2026-07-14).
   `SUDO_MD_VERIFY_ENFORCE=true`, signed digest `38eca778abb0..`, daemon `NRestarts=0`.