diff --git a/CODE-AUDIT.md b/CODE-AUDIT.md
index 46c5555..8aef6e8 100644
--- a/CODE-AUDIT.md
+++ b/CODE-AUDIT.md
@@ -66,12 +66,18 @@ untouched files — DownloadOptionsForm/SettingsView/settings/*Card).
 **Session 2026-07-01 pass 2 (the "finish the audit" batch — phase-by-phase PRs):** landed **Phase 1**
 (doc/stale-checkbox reconciliation — L82, L89, plus ticks for wire-or-remove M5/M6/UX1, MAX_ENQUEUE_BATCH,
 and the UX/ref duplicates whose roots already shipped), **Phase 2** (build hygiene — L83 `.blockmap` off via
-`nsis.differentialPackage:false`, L84 `dist/` clean step), and **Phase 3 start: CC8** (in-house file-backed
-leveled logger [logger.ts](src/main/logger.ts) + renderer `log:write` sink). Each phase is its own
-branch/PR stacked on `refactor/h1-decompose-god-files`. All green: typecheck + 258 tests + eslint + prettier.
-Remaining Phase 3 (execFileAsync/streamToFile/reliability/M4-persist) and Phases 4–8 (renderer
-tokens+primitives, logic/perf, UX/Windows, copy/a11y) continue; per the run's policy, subjective-visual and
-live-verify-only items are implemented but left **unchecked** with a flagged list for a watched pass.
+`nsis.differentialPackage:false`, L84 `dist/` clean step), and **Phase 3 (main foundation)**: **CC8**
+(in-house file-backed leveled logger [logger.ts](src/main/logger.ts) + renderer `log:write` sink), the
+**`execFileAsync`** consolidation ([lib/exec.ts](src/main/lib/exec.ts) — the five hand-rolled spawn-and-read
+wrappers in probe/ytdlp×2/ffmpeg/indexer/download.probeMeta; SIMP2, and the foundation for CC4/CC5),
+**L136** (incognito is now enforced in main — no errorlog entry, no title/URL in the OS toast, no login/
+browser cookies), and **R9** (the yt-dlp update throttle no longer skips forever after a backward clock
+correction). Each phase is its own branch/PR stacked on `refactor/h1-decompose-god-files`. All green:
+typecheck + 263 tests + eslint + prettier. **Next:** M4 (queue persistence — its own focused PR), the
+download-engine lifecycle items (R4/L65/L139/L157/B2/B6 — need a live download to verify), the CC4/CC5
+tails (SIMP5 line-buffer + SIMP16 net.request), then Phases 4–8 (renderer tokens+primitives, logic/perf,
+UX/Windows, copy/a11y). Per the run's policy, subjective-visual and live-verify-only items are implemented
+but left **unchecked** with a flagged list for a watched pass.
 
 **Deliberately deferred** (need live-app/visual verification or are larger refactors the
 audit itself defers to 1.x): the wire-or-cut features (M5/M6/UX1), the god-file/store