diff --git a/context/current-state.md b/context/current-state.md
index 7047cfe..d0850d4 100644
--- a/context/current-state.md
+++ b/context/current-state.md
@@ -5,25 +5,24 @@ NEXT:  Pi to direct next build phase (Phase 2 session-brain auto-write, or Phase
 
 ## Decisions (last 5)
 
-- 2026-06-21: SIGNAL_API_KEY rotated by Claude Code. Leaked key removed from Vercel + source; api.js now Clerk-token-only; exposure closed (old key returns 401). Frontend redeploy left to Pi's next signal-ui deploy.
-- 2026-06-21: Build Spec Phase 1 done (Claude Code). research_insight category live (no migration; gate was a router Literal). CGM-to-pharmacy insight planted in Signal ws (salience 1.0). 8 session summaries moved Signal ws -> Sessions ws (47->39, 79->87).
-- 2026-06-21 — STTIL Shield is a standalone revenue product, not Signal add-on.
-- 2026-06-21 — AI Consent Addendum is open-source brand builder + Shield lead magnet.
-- 2026-06-21 — Game Center token naming: fun/professional names (e.g., 'Dwight Schrute', 'Grogu') for tokenized entities, no PII/PHI risk.
-- 2026-06-20 — current-state.md bridges Pi and Claude Code. Both read at start, both write at wrap-up.
-- 2026-06-18 — SSA principle adopted: sparse, content-dependent, time-weighted retrieval.
+- 2026-06-21: Subagent cost guardrails installed — all 8 builtin subagents now default to deepseek/deepseek-v4-flash with 2-5 min hard timeouts. Prevents future runaway credit burn.
+- 2026-06-21: Audit logger trust fix committed + pushed (Supabase client detection, error wrapping). Cascade test assertion corrected.
+- 2026-06-21: SIGNAL_API_KEY rotated by Claude Code. Leaked key removed from Vercel + source; api.js now Clerk-token-only; exposure closed (old key returns 401).
+- 2026-06-21: Build Spec Phase 1 done (Claude Code). research_insight category live. CGM-to-pharmacy insight planted. 8 session summaries moved Signal ws -> Sessions ws.
+- 2026-06-21: STTIL Shield is standalone revenue product. AI Consent Addendum is open-source brand builder + Shield lead magnet.
 
 ## Open Threads (max 5)
 
-- Clerk: live state in flux (Vercel Clerk var changed ~1h ago; deployed bundle shows mixed pk_test/pk_live). Claude Code did NOT touch Clerk this session. Pi to confirm current render state and own the prod migration.
-- Pi's Firecrawl Env Var: Needs pi restart from sourced shell (this session using `curl` workaround).
-- LabABLE Meeting: This week; pitch JV on Shield + AI Consent as their compliance solution.
-- Claude Code's Pilot E2E: Unbreak live app (P0-1) is top priority pending Clerk DNS.
+- Clerk prod migration: verify live auth state (mixed pk_test/pk_live in deployed bundle). Pi to own.
+- LabABLE Meeting Fri 2026-06-26 1:30 PM — /pilot-prep needed.
+- Build Spec Phase 2: session-brain auto-writes current-state.md + insight extraction (Pi to design).
+- 3 validation product blockers: MA misclassification, duplicate patient_id, doc-status override.
+- Firecrawl env var set this session (key valid), persists only after pi restart from sourced shell
 
 ## Stack
 
 - Signal: PHI contained in `patient_id` field (name, MRN, account #s) — requires tokenization.
-- Model for Pi: `openrouter/google/gemini-2.5-flash` (image-capable, cheap, agentic).
+- Model for Pi: `deepseek/deepseek-v4-flash` (cheap, high-thinking). Subagents also default to this model.
 - Signal-api: Railway (signal-api-production-91c2)
 - Signal-ui: Vercel (signal-ui-xi.vercel.app)
 - Supabase: itmospnregdyiatbbdwl (JWT key)
@@ -34,4 +33,4 @@ NEXT:  Pi to direct next build phase (Phase 2 session-brain auto-write, or Phase
 
 TriLane Memory now has the `research_insight` category live + 1 planted insight (CGM-to-pharmacy, salience 1.0) in the Signal workspace. Session summaries no longer leak into the Signal workspace; they live in the Sessions workspace.
 
-## Updated: 2026-06-21 (Claude Code: key rotation, shared-context pointers, Build Spec Phase 1 complete)
+## Updated: 2026-06-21 (Pi recovery: subagent cost guardrails installed, audit log + test commit, session 3 wrapped)