diff --git a/docs/plans/panel-dkim-signing.md b/docs/plans/panel-dkim-signing.md
index 964a92e..a21e64a 100644
--- a/docs/plans/panel-dkim-signing.md
+++ b/docs/plans/panel-dkim-signing.md
@@ -1,10 +1,10 @@
 # Plan: panel-dkim-signing
 
-**Status:** draft, 2026-10-15 - the row is agreed (owner, 2026-10-15, the
+**Status:** agreed, 2026-10-15 - the row is agreed (owner, 2026-10-15, the
 order port25-bare-newline -> base-trixie -> panel-dkim-signing); three
-questions below go to the owner one at a time; Q1 and Q2 are decided.  
+questions below were settled one at a time the same day.  
 **Date:** 2026-10-15  
-**Version:** `2.8.0` MINOR (after base-trixie's `2.7.0`). No migration;
+**Version:** `2.8.0` MINOR (after base-trixie, shipped `2.7.0`). No migration;
 nothing for an operator to do.
 
 ---
@@ -120,6 +120,9 @@ Decided here (technical, the owner may overrule):
   "DKIM signer" (the panel's `sign.sock`, checked the same way), the two
   programs leave the process list. A mockup first, as for any page
   change.
+  **Settled 2026-10-15:** shown to the owner as a picture; it follows from
+  the card's own rule (a row per milter socket Postfix needs, and the
+  signer is strict), so it is not his choice - the two rows as drawn.
 
 ## Stages
 
diff --git a/docs/roadmap.md b/docs/roadmap.md
index 004b3ba..3e7f354 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -44,7 +44,7 @@ in `git log` and [CHANGELOG.md](../CHANGELOG.md).
 | own-mta-builds | Analysis: build Postfix and OpenDKIM ourselves, patched, instead of Debian's packages | analysed 2026-10-15: no own builds; three rows proposed instead | — | [own-mta-builds-2026-10-15.md](own-mta-builds-2026-10-15.md) |
 | port25-bare-newline | The inbound relay's port 25 refuses bare newlines in DATA (`smtpd_forbid_bare_newline=normalize`) | shipped `2.6.1` | — | — |
 | base-trixie | The image's base from Debian bookworm (LTS since 2026-07-12) to trixie: Postfix 3.10 with the 2026 security batches | shipped `2.7.0` | — | — |
-| panel-dkim-signing | DKIM signing in the panel's own milter; OpenDKIM, the syslog relay and the parser port removed | agreed (2026-10-15; after base-trixie, MINOR); plan drafted, three questions open | 0/14 | [plans/panel-dkim-signing.md](plans/panel-dkim-signing.md) |
+| panel-dkim-signing | DKIM signing in the panel's own milter; OpenDKIM, the syslog relay and the parser port removed | agreed (2026-10-15; plan agreed, next) | 0/14 | [plans/panel-dkim-signing.md](plans/panel-dkim-signing.md) |
 | phone-desktop-mode | A phone browser in "desktop site" mode gets the phone navigation | agreed (2026-10-13: after stages 1 and 2 of audit-2026-10-12) | — | — |
 | from-header-binding | Hold a message's `From:` header against the application that sends it | shipped `2.4.0` | 9/9 | [plans/from-header-binding.md](plans/from-header-binding.md) |
 | panel-redesign | Panel redesign (accepted mockups, design contract) | shipped `2.0.0` | 27/27 | [plans/panel-redesign.md](plans/panel-redesign.md) |