diff --git a/docs/audit-2026-10-12.md b/docs/audit-2026-10-12.md
index d0b47a5..a3650b4 100644
--- a/docs/audit-2026-10-12.md
+++ b/docs/audit-2026-10-12.md
@@ -725,7 +725,11 @@ says so; the order is my recommendation by harm per hour.
 4. Dead code removal from § Nits, with `staticcheck` added to `test.yml` so it
    stays gone. — **Haiku**
 
-### Not planned, said out loud
+### Decided with the owner on 2026-10-12
+
+Four items I had first put below the line; three of them are in the plan
+above after discussion, which is why they are recorded here with the
+reasoning rather than struck.
 
 - L5 (`tls_policy` per next-hop): the full fix is a model change (TLS mode per
   upstream, not per domain) — a design item. Decided (owner, 2026-10-12):