diff --git a/machine-docs/STATUS-canon.md b/machine-docs/STATUS-canon.md
index 7836338..28d874f 100644
--- a/machine-docs/STATUS-canon.md
+++ b/machine-docs/STATUS-canon.md
@@ -1,6 +1,12 @@
 # STATUS — phase `canon` (canonical sweep, make it real)
 
-Gate: M1 PASS (Adversary 3bdd5d1, no VETO). **M2 CLAIMED, awaiting Adversary.**
+## DONE
+
+Gate: M1 PASS (Adversary 3bdd5d1, no VETO). **M2 PASS (Adversary 8149a2c @ 16:14Z, no VETO).**
+Both milestones fresh-Adversary-verified; §5 Definition of Done fully cold-verified; no standing VETO →
+phase `canon` complete. The canonical sweep is real and proven end-to-end (real non-hollow timer fire
+promoted 16 canonicals, determinism 2nd-sweep no-op, tagged-promote gate both ways, samever orthogonal,
+all recipes enrolled, UPGRADE_BASE_VERSION retired, AI-free runtime). DEFECT-1/2/3 all closed.
 
 WHAT/HOW/EXPECTED/WHERE for the Adversary. Reasoning lives in JOURNAL-canon.md.