From 789ff2b38e7ff4f67131d5b7094d7d17f5749054 Mon Sep 17 00:00:00 2001
From: michael <operations@dangerousthings.com>
Date: Mon, 27 Apr 2026 13:04:42 -0700
Subject: [PATCH] =?UTF-8?q?docs:=20refresh=20README=20status=20=E2=80=94?=
 =?UTF-8?q?=20Phases=200-12=20+=2015/16=20done;=2013/14/17/18=20remain?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/README.md b/README.md
index 6d8b791..0581f9b 100644
--- a/README.md
+++ b/README.md
@@ -13,12 +13,16 @@ See [docs/BUILDING.md](docs/BUILDING.md).
 
 ## Status
 
-Pre-alpha. Phases 0–8, 15, 16 code complete (workspace scaffold, D-Bus daemon,
-storage layer, FIDO2 backend, policy apply via pam-auth-update with lockout
-simulation, PAM pending-flag backstop, `authforgectl` CLI, GUI Security Keys
-tab, `gnome-control-center` overlay, Ansible role for fleet deployment).
-Phase 9 (GUI Policy tab) and Phase 12 (recovery flow) are the next single-lane
-bundles. See [docs/plans/](docs/plans/) for design, roadmap, and per-phase
+Pre-alpha. Phases 0–12, 15, 16 code complete (workspace scaffold, D-Bus
+daemon, storage layer, FIDO2 backend, policy apply via pam-auth-update
+with lockout simulation, PAM pending-flag backstop with Argon2id recovery
+codes, `authforgectl` CLI, GUI shell with Security Keys / Policy /
+Recovery / TOTP tabs, fullscreen first-run enrollment modal,
+`pam_google_authenticator`-delegated TOTP, `gnome-control-center`
+overlay, Ansible role for fleet deployment). Remaining work for v1.0:
+Debian packaging finalization (Phase 13), Launchpad PPA + VM smoke
+(Phase 14), integration test harness (Phase 17), user docs (Phase 18).
+See [docs/plans/](docs/plans/) for design, roadmap, and per-phase
 implementation plans.
 
 Copyright 2026 Dangerous Things, LLC. Licensed under the Apache License, Version 2.0.