diff --git a/AUDIT.md b/AUDIT.md
index 3e82da8..7e7fcfa 100644
--- a/AUDIT.md
+++ b/AUDIT.md
@@ -1,6 +1,12 @@
 # AUDIT — cayce-ops
 
-Audited commit: the merge of PR #6 on `main` (see *Audited commit* at the bottom).
+Audited commit: **d500d88** — merge of PR #7 on `main`.
+
+> Note for the auditor: PRs #1-#6 merged with E501 lint findings present
+> (per-branch gate runs were misread). PR #7 is a lint-only cleanup
+> (line wrapping, F841/F821/E731 fixes, no behavior change) that restores
+> a fully green gate. The honest trail is kept here on purpose.
+> Re-run `make check` at d500d88 to verify: ruff 0 · 44 tests · no leaks.
 Gate that commit passed: `make check` — ruff (0 findings), 44 tests green,
 alembic smoke on sqlite, gitleaks full history (no leaks).
 
@@ -146,7 +152,6 @@ docker compose up -d             # or run each: uv run cayceops {scanner,executo
 ## Audited commit
 
 - Repository: `cayce/cayce-ops` (branch `main`)
-- Audited: merge of PR #6 (`audit: AUDIT.md for operator review`) — hash printed
-  in the "Ready for audit" issue that links this file.
-- Gate at that commit: ruff clean · 44/44 tests · alembic 0001 smoke OK ·
-  gitleaks `--all` no leaks.
+- **Audited: d500d888701c3f1cd3305d098a448c3e20a8ad99** (merge of PR #7)
+- Gate at that commit: ruff clean (0 findings) · 44/44 tests · alembic 0001
+  smoke OK · gitleaks `--all` no leaks · `make check` exit 0.