diff --git a/docs/Development-Plan.md b/docs/Development-Plan.md
index e08e5cd..674541b 100644
--- a/docs/Development-Plan.md
+++ b/docs/Development-Plan.md
@@ -92,7 +92,7 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
 
 **M1.2 Transcript views.** **Done.** (#78 closes when a live run confirms it.)
 
-**M1.3 Execution over SSH.** *Pre-approved.*
+**M1.3 Execution over SSH.** *Pre-approved.* **Done** (#93).
 - `execute(host, command, *, secrets, stdin)` as the only way to run anything; file
   tools over SSH; the host bound by the harness from the project (L13).
 - The workspace lives on the build VM: cloned there, with no token in its
@@ -101,6 +101,10 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
 - Tests against a throwaway `sshd` container.
 - Acceptance: the existing executor and delegation tests pass over SSH; a live run
   of one milestone on the operator's build VM.
+- Also landed, from that run (bring-up run 3): the push credential as an HTTPS
+  token or an SSH deploy key; flat harness branch names, after the executor made
+  a branch named after the task; **publishing only the work (#80)**, brought
+  forward from M2.1; credentials kept out of every repr.
 
 **M1.4 Projects** (D8). *Pre-approved.*
 - The project entry in configuration: repository, default branch, build VM, label
@@ -129,8 +133,9 @@ later one widens it and is followed by a live run.
   `start_milestone` / `finish_milestone` on a harness branch (D4); the PR; a review
   comment answered (D5); the merge; the item closed.
 - Includes what carries over: a fresh workspace at item start and harness-owned
-  branches (D3, D4, #62); publishing only the work (#80); review intake, inline
-  comments and the watch stall (#69, #70); the review-fix check after merge.
+  branches (D3, D4, #62); review intake, inline comments and the watch stall
+  (#69, #70); the review-fix check after merge. (Publishing only the work, #80,
+  landed early in M1.3.)
 - `loop.qnt`'s properties for these paths become tests.
 - Acceptance: a live run of that path, plus a crash mid-publish.
 
@@ -234,9 +239,6 @@ vision; one local model for every agent; several forges (#26); a room per projec
 | #69 inline review comments | M2.1 |
 | #70 watch stall | M2.1 |
 | #77 conversational agent | M2.3 (questions), M2.7 |
-| #78 transcript scoping and attribution | Done in M1.1, M1.2; closes after a live run |
-| #80 build artifacts in PRs | M2.1 |
-| #89 token in the clone's `.git/config` | M1.3 |
 
 ## 6. Implementation notes