diff --git a/docs/planning/PROJECT_PLAN.md b/docs/planning/PROJECT_PLAN.md
index 325ab68..4881fba 100644
--- a/docs/planning/PROJECT_PLAN.md
+++ b/docs/planning/PROJECT_PLAN.md
@@ -94,15 +94,23 @@ Observable, in this order:
    the visitor sees a confirmation either way.
 3. The site passes WCAG 2.1 AA on the pages a buyer actually walks — currently it
    does not, which is what `Batch 10` in the tracker is for.
-4. Nothing on the page is a claim the business cannot substantiate. Two open
-   issues say it currently is (#108, #110).
+4. Nothing on the page is a claim the business cannot substantiate. As of
+   2026-09-10 that holds: the fabricated-looking certification number was
+   removed on the owner's instruction in May (#108), and the owner confirmed the
+   "25+ years" experience claim (#110). It is a standing test, not a finished
+   one: the copy sheets the owner now supplies are approved page by page, and
+   `docs/design/REDESIGN_REVIEW.md` carries his 2026-09-10 direction that a
+   figure must be current, vendor-attributed and verified.
 
 ## Known risks
 
-- **Unverifiable marketing claims are live.** A fabricated-looking certification
-  number and an unverified "25+ years" both ship today (#108, #110). This is the
-  only risk here that is a credibility problem rather than an engineering one,
-  and neither can be fixed without the owner.
+- **Unverifiable marketing claims. Cleared, and worth re-reading before the next
+  copy change.** Both instances that prompted this are resolved: the
+  certification number came off the site in May, and the owner confirmed "25+
+  years" on 2026-09-10. What remains is the habit that produced them, which is
+  why the unattributed "99.999% uptime" line was removed from the contact centre
+  page on the owner's instruction the same week. A claim goes on a page when
+  somebody can substantiate it, and the owner is the only one who can.
 - **The lead database has no backup.** `/app/db/queuenorth.db` in a Docker named
   volume on nebula is the only copy of every inbound lead and support request.
   Tracked in `Batch 15`. Until a restore has been proven, this project has a