diff --git a/machine-docs/JOURNAL-2w.md b/machine-docs/JOURNAL-2w.md
index aad0a1a..cb358b8 100644
--- a/machine-docs/JOURNAL-2w.md
+++ b/machine-docs/JOURNAL-2w.md
@@ -394,3 +394,24 @@ WC6 ADVERSARY PASS (REVIEW-2w b8b698e). Then built the final two:
 
 Claimed WC8+WC9 (the final gates). On their PASS, EVERY WC1–WC9 (incl WC1.1/WC1.2) is Adversary-verified
 → write `## DONE` to STATUS-2w (handshake: <24h PASS for all + no VETO) → watchdog returns to Phase 2.
+
+## 2026-05-29 — Phase 2w COMPLETE — ## DONE written
+
+WC8+WC9 ADVERSARY PASS (REVIEW-2w 2822d60). The Adversary explicitly authorized DONE: ALL WC1-WC9
+(incl WC1.1 keycloak+traefik, WC1.2) cold-verified from its own clone with fresh PASSes dated
+2026-05-29, NO VETO, no open findings, W0.10 traefik tracked-open CLOSED.
+
+Wrote `## DONE` to STATUS-2w.md with the per-WC evidence table (each WC → REVIEW-2w PASS commit /
+gate). Final state: keycloak+traefik 200, custom-html canonical idle@1.11.0+1.29.0, nightly-sweep
+timer active, system running (0 failed), disk 50%. No tests softened anywhere in the phase.
+
+What Phase 2w delivered: a warm-data layer for cc-ci CI — (1) a live-warm shared keycloak + a
+health-gated traefik that auto-update to latest with snapshot-backed rollback (keycloak) / version
+rollback (traefik) behind a pre-deploy major/manual-migration safety gate, alerting via sentinels;
+(2) data-warm per-recipe canonicals at stable warm-<recipe> domains with one known-good snapshot
+each; (3) an opt-in `--quick` fast lane (reattach canonical → upgrade to PR head → assert → PASS
+keep-volume / FAIL restore; never promotes, never gates merge); (4) cold-only canonical advancement
+(promote-on-green-cold) + a nightly rebuild-then-cold-sweep; (5) resource/disk safety + docs.
+
+Per §6.1, `## DONE` makes the watchdog auto-return to Phase 2 (resume recipe authoring from
+STATUS-2/BACKLOG-2, which were preserved at the pause). Stopping the 2w loop here.
diff --git a/machine-docs/STATUS-2w.md b/machine-docs/STATUS-2w.md
index ea4d804..53535b9 100644
--- a/machine-docs/STATUS-2w.md
+++ b/machine-docs/STATUS-2w.md
@@ -1,5 +1,34 @@
 # STATUS — Phase 2w (warm canonical deployments + `--quick` CI mode)
 
+## DONE
+
+**Phase 2w COMPLETE @2026-05-29.** Every Definition-of-Done item (WC1–WC9, incl. WC1.1 + WC1.2) is
+**Adversary cold-verified with a fresh (<24h) PASS in REVIEW-2w, NO `## VETO`, no open `[adversary]`
+findings** — the Adversary authorized DONE (REVIEW-2w 2822d60: "ALL Phase-2w gates Adversary
+cold-verified — NO VETO — DONE authorized"). The watchdog now auto-returns to **Phase 2** (resume
+recipe authoring; STATUS-2/BACKLOG-2 intact).
+
+Evidence (each WC → its REVIEW-2w PASS / gate commit):
+| WC | What | PASS (REVIEW-2w / gate) |
+|---|---|---|
+| WC1 | live-warm UNPINNED keycloak; per-run namespaced realms; concurrency; reaping | 31ac86d / 985686f |
+| WC1.1 | health-gated rollback — keycloak (stateful, snapshot) | 31ac86d / 985686f |
+| WC1.1 | health-gated rollback — traefik (stateless, version-only) | e3b08a9 / e678d2e |
+| WC1.2 | pre-deploy safety gate (major / manual-migration → hold+alert) | 31ac86d / 985686f |
+| WC2 | data-warm canonical model + registry | 0246296 / 4ce80f8 |
+| WC3 | known-good snapshots (raw-while-undeployed, restore round-trips) | 0246296 / 4ce80f8 |
+| WC4 | `--quick` mode (PASS keeps known-good; FAIL restores; never promote) | 31f0e42 / 3ff2bf6 |
+| WC5 | promote-on-green-cold (only cold-on-latest advances) | 5bbc47c / 125453d |
+| WC6 | nightly full-cold sweep (timer + roll-warm/infra + serial sweep) | b8b698e / 465e105 |
+| WC7 | `!testme --quick` trigger / labeling / no-canonical fallback | 31f0e42 / 3ff2bf6 |
+| WC8 | resource safety + isolation (serialize, disk prune, D8-excluded) | 2822d60 / 40b03a9 |
+| WC9 | docs (`docs/warm.md`) + the `--quick` rollback proof | 2822d60 / 40b03a9 |
+
+Final state: keycloak + traefik 200; custom-html canonical idle@1.11.0+1.29.0; nightly-sweep.timer
+active; system running (0 failed); disk 50%. No tests softened in the phase.
+
+---
+
 **Phase plan (SSOT):** `/srv/cc-ci/cc-ci-plan/plan-phase2w-warm-canonical-quick.md`
 **Loop state for THIS phase:** STATUS-2w / BACKLOG-2w / REVIEW-2w / JOURNAL-2w (DECISIONS.md shared).
 Phase 1/1b/1c/1d/1e and Phase 2 STATUS/BACKLOG/REVIEW files are NOT this phase's state.