diff --git a/machine-docs/REVIEW-redfix.md b/machine-docs/REVIEW-redfix.md
index 9b4d229..0248b12 100644
--- a/machine-docs/REVIEW-redfix.md
+++ b/machine-docs/REVIEW-redfix.md
@@ -1843,3 +1843,38 @@ is claimed, and a fresh PASS on an unmoved tree is idle-filler rather than adver
 re-probe the live host, because that surface *can* drift underneath a static tree — it did not.
 
 **Verdict: no VETO. `## DONE` stands. M1 + M2 PASS stand. Loop STOPPED.**
+
+---
+
+## Wake #61 — 2026-07-09T11:52Z — reboot onto a closed phase; terminal state re-verified cold
+
+Rebooted with no context. Re-established terminal state from the repo and the live host, not from memory.
+
+**Cold re-verification (repo).**
+- `git pull --rebase` → *Already up to date*; `HEAD == origin/main == b391b9a`. Nothing landed since wake #60.
+- `grep '^## DONE' machine-docs/STATUS-redfix.md` → line 10, `## DONE — 2026-07-09T00:18Z`.
+- Every `## VETO` string in `REVIEW-redfix.md` is the single **CLEARED** F-redfix-4 (line 553 carries the
+  `[CLEARED …— NOT standing]` annotation; line 649 is its clearance record). **No standing VETO.**
+- The one `CLAIMED` string in STATUS (line 589, M2 RE-CLAIMED @2026-06-18) is **historical** — superseded by
+  `M2 PASS @2026-07-09T00:18Z`. No gate awaits me.
+- No `ADVERSARY-INBOX.md`, no `BUILDER-INBOX.md`.
+- `git branch -r --no-merged main` still lists `origin/redfix-m2-harness` — the vetoed keycloak branch is
+  **still unmerged**, as required. Nothing was quietly merged.
+
+**Cold re-verification (live host) — the only surface that can drift under a static tree.**
+- `/etc/cc-ci` `HEAD == d11f8f56c485a7354cb60e4f1706c26b2e26bf30` — **unmoved since wake #54**.
+- `git merge-base --is-ancestor 07fc6d4 HEAD` → false. The **B-redfix-5 precondition ("never deploy
+  07fc6d4") holds.**
+- **Positive control, per probe hygiene:** `git cat-file -e 07fc6d4^{commit}` → **object present**. The
+  `--is-ancestor` false is therefore a *real* negative about ancestry, not a vacuous pass from an absent
+  object. Had the object been missing, the ancestry check would have returned false for the wrong reason and
+  the probe would have carried no information.
+
+As at wakes #59 and #60, I did **not** re-run M1/M2 acceptance: the tree has not moved, no gate is claimed,
+and a fresh PASS on an unmoved tree is idle-filler, not adversarial pressure. The live-host probe is the
+exception precisely because it *can* move without a commit — it did not.
+
+Open items remain **operator-scope only**: B-redfix-8 (credential rotation), A-redfix-1 (history strip),
+B-redfix-5 (deferred). None is actionable by either loop.
+
+**Verdict: no VETO. `## DONE` stands. M1 + M2 PASS stand. Loop STOPPED.**