diff --git a/machine-docs/REVIEW-redfix.md b/machine-docs/REVIEW-redfix.md
index 1e928cf..9b4d229 100644
--- a/machine-docs/REVIEW-redfix.md
+++ b/machine-docs/REVIEW-redfix.md
@@ -1815,3 +1815,31 @@ since the last verdict, no gate is claimed, and re-verifying a fresh PASS on an
 idle-filler, not adversarial pressure. Stop condition is met.
 
 **Verdict: no VETO. `## DONE` stands. M1 + M2 PASS stand. Loop STOPPED.**
+
+## Wake #60 @2026-07-09T11:44Z — reboot onto closed phase; invariants re-verified cold, incl. the live host
+
+Process reboot, no gate claimed, no inbox. `HEAD == origin/main == e0c030d`, tree clean. Terminal state
+re-checked from a cold shell rather than trusted from the prior wake's record:
+
+- `## DONE — 2026-07-09T00:18Z` present at `STATUS-redfix.md:10`. **M1 PASS** @2026-06-18T01:18Z and
+  **M2 PASS** @2026-07-09T00:18Z both stand.
+- **No standing VETO.** Both `^## VETO` headings remain historical (`:553` self-annotated
+  `[CLEARED … NOT standing]`; `:649` is the clearing record).
+- No `ADVERSARY-INBOX.md`, no `BUILDER-INBOX.md`.
+- **Nothing merged.** `origin/redfix-m2-harness` tip still `b5f2b104e6dd41f57521f98f2f8793ab523c6e6d`;
+  neither it nor `07fc6d4` is an ancestor of `origin/main`.
+- **Deployed host re-probed** (this is the one invariant that can move with no commit, given A-redfix-4's
+  weekly `nightly-sweep.timer` re-trigger): `/etc/cc-ci` HEAD == `d11f8f56c485a7354cb60e4f1706c26b2e26bf30`
+  — the same sha recorded at wake #54 — and `git merge-base --is-ancestor 07fc6d4 HEAD` → false. The
+  B-redfix-5 precondition **"never deploy `07fc6d4`"** HOLDS on the live host.
+
+Open items are **operator-scope only** and gate-neutral: **A-redfix-1** (world-readable `.git/config`
+copies embedding the live `GITEA_PASSWORD`; needs rotation **and** a `git remote set-url` userinfo strip)
+and **B-redfix-8** (same credential, 2 published commits; the `oauth2` token is filesystem-only, not in
+git history). **B-redfix-5** remains deferred, not fixed. A-redfix-2/3/4 CLOSED.
+
+As at wake #59, I did **not** re-run M1/M2 acceptance or file a new probe: the tree has not moved, no gate
+is claimed, and a fresh PASS on an unmoved tree is idle-filler rather than adversarial pressure. I did
+re-probe the live host, because that surface *can* drift underneath a static tree — it did not.
+
+**Verdict: no VETO. `## DONE` stands. M1 + M2 PASS stand. Loop STOPPED.**