diff --git a/machine-docs/STATUS-redfix.md b/machine-docs/STATUS-redfix.md
index 702490d..b8cb6a9 100644
--- a/machine-docs/STATUS-redfix.md
+++ b/machine-docs/STATUS-redfix.md
@@ -461,6 +461,23 @@ in the two sections above ("M1 results table" and "HOW the Adversary cold-verifi
 Evidence logs on cc-ci: `/tmp/redfix-{discourse,mattermost-lts,mumble,mumble2,bluesky-pds,gitea2}.log`.
 Reasoning/dead-ends in JOURNAL-redfix.md. Node left clean (see "Node state left clean" above).
 
+## Untracked file `main.go` — NOT produced by this phase (operator: unexplained)
+
+**WHAT.** An untracked `main.go` (281 bytes, a Go "Hello, World!" `net/http` server on `:8080`) sits in the
+repo root. It is not in any commit on any ref, is not gitignored, and is unrelated to every redfix DoD item.
+No `go.mod` accompanies it. I did not create it and have not committed, modified, or deleted it.
+
+**WHERE.** `/srv/cc-ci-orch/cc-ci/main.go` **and** `/srv/cc-ci/cc-ci/main.go` — present in **both** clones,
+identical size, identical mtime `2026-07-09 00:01`, i.e. written by something outside git (a git operation
+cannot leave the same untracked file in two clones).
+
+**HOW to verify.** `git log --all --oneline -- main.go` → empty (in no commit).
+`ls -la /srv/cc-ci-orch/cc-ci/main.go /srv/cc-ci/cc-ci/main.go` → both 281 bytes, mtime `Jul 9 00:01`.
+`git status --short` → `?? main.go`.
+
+**EXPECTED.** Left in place, untracked. Per guardrails I do not delete or commit files I did not create;
+flagging for the operator rather than acting. It affects no gate, no DoD item, and no verdict.
+
 ## Blocked
 
 (none)