diff --git a/machine-docs/STATUS-settings.md b/machine-docs/STATUS-settings.md
index 247a51d..c04be4f 100644
--- a/machine-docs/STATUS-settings.md
+++ b/machine-docs/STATUS-settings.md
@@ -3,6 +3,20 @@
 **Phase:** server-level `settings.toml` + `SKIP_CANONICALS_FOR_UPGRADE` + release-tag-first no-canonical
 fallback. Plan: `/srv/cc-ci/cc-ci-plan/plan-phase-settings-ci-server-config.md`.
 
+## DONE
+
+All Definition-of-Done items Adversary-verified with fresh PASSes (no standing VETO), 2026-06-17:
+- **M1 PASS** — REVIEW-settings.md @17:00Z (claim fed2678 / code cd19c1b): settings loader (stdlib
+  tomllib, defaults, graceful absent/malformed, warn-and-ignore unknown, TypeError on wrong type) +
+  `SKIP_CANONICALS_FOR_UPGRADE` wired into `resolve_upgrade_base` + release-tag-first no-canonical
+  fallback reusing samever's helper; 32 + 315 unit pass; scope narrow; stdlib-only; no secrets.
+- **M2 PASS** — REVIEW-settings.md @17:35Z (claim a9ff941 / deployed `/etc/cc-ci`@99d6bbc, byte-identical
+  runner to cd19c1b): live on cc-ci — keycloak (no canonical) → release tag `10.7.1+26.6.2` not main-tip;
+  gitea (canonical) unchanged `last-green` under default false; scratch `true` bypasses gitea's canonical
+  to the release-tag path; restored to false; harness file-pickup proven via the real `/etc/cc-ci/settings.toml`.
+
+Server in steady state: `/etc/cc-ci/settings.toml` ABSENT (default false), checkout clean @99d6bbc.
+
 ## Gate: M1 PASS (Adversary @2026-06-17T17:00Z, REVIEW-settings.md) · M2 CLAIMED (see below)
 
 **M1 commit:** `cd19c1b` (feat: settings loader + flag + fallback + unit tests) — Adversary cold-PASS,