diff --git a/docs/TODO.md b/docs/TODO.md
index 1cdd7f2..ffbf6fb 100644
--- a/docs/TODO.md
+++ b/docs/TODO.md
@@ -1499,16 +1499,16 @@ DDP insurance for the `ice`/`mlx5` server-NIC build variant + small Intel blobs)
 ~600 MB). Wi-Fi (`iwl*-firmware`, ~83 MB) removed as packages (wired-only fleet).
 Strip-in-place (`find … -exec rm -rf`, not `rpm -e` — can't drop the package without
 losing i915); a `du -sh /usr/lib/firmware` line reports the result in the build log.
-**BOOT-VERIFIED 2026-07-03 (commit `f59eb79`): built AND booted successfully** — langpacks
-en-only + the pre-dracut firmware strip (keep i915/intel/mellanox/intel-ucode) do NOT
-break the boot/root path (firmware 678→147 MB, initramfs bundles only the keep-list).
-Still to confirm on that build: (a) the kiosk actually **RENDERS** (i915 DMC/GuC load) —
-"booted" ≠ "display up"; only exercised on real i915 hardware (the 820), not a virtio VM;
-(b) if any host has a non-Intel GPU or an `ice`/`mlx5` NIC, widen the keep-list before
-trusting fleet-wide. **NOT yet in `f59eb79`** (bench-verify separately): the `nss-mdns`/
-avahi drop (`5cc72cc`) and the `omit_drivers` GPU-kmod trim + keep-list tightening —
-dropped `mellanox/`, narrowed `intel/` to `ice` only (`853ae20`). Audited models so far:
-HP-820-class (i915 + e1000e + iwlwifi-dropped) and virtio VMs.
+**BENCH-VERIFIED 2026-07-03 (commit `f59eb79`): built, booted, AND the kiosk SPA RENDERS
+on both the VM (virtio-gpu) and the 820 (i915).** This clears the firmware strip's one
+real risk — the i915 DMC/GuC blobs load on real hardware, so the keep-list
+(i915/intel/mellanox/intel-ucode, pre-dracut) is validated end-to-end (firmware 678→147 MB,
+initramfs bundles only the keep-list). Remaining caveat: if a future host has a non-Intel
+GPU or an `ice`/`mlx5` NIC, widen the keep-list before trusting fleet-wide. **NOT yet in
+`f59eb79`** (bench-verify separately — none touch i915, so render should be safe): the
+`nss-mdns`/avahi drop (`5cc72cc`) and the `omit_drivers` GPU-kmod trim + keep-list
+tightening — dropped `mellanox/`, narrowed `intel/` to `ice` only (`853ae20`). Audited
+models: HP-820-class (i915 + e1000e + iwlwifi-dropped) and virtio VMs.
 
 **Build-verified 2026-07-03:** firmware **678 MB → 147 MB**; the initramfs diagnostic
 confirms only the keep-list is bundled (i915 all-gens + intel/ice + intel/ish + mellanox)