diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md
index 0738904..fe4a4b3 100644
--- a/.planning/ROADMAP.md
+++ b/.planning/ROADMAP.md
@@ -299,12 +299,12 @@ Before any phase is marked complete, all three gates must pass:
 
 **Wave 2** *(blocked on Wave 1 completion)*
 
-- [ ] 06-04-PLAN.md — Multi-stage Dockerfile + read_only/tmpfs/cap_drop on backend + celery-worker (D-07, D-08, D-09)
-- [ ] 06-05-PLAN.md — Trusted-proxy get_client_ip body + per-account rate limiter on document/cloud endpoints (D-11, D-12, D-13)
+- [x] 06-04-PLAN.md — Multi-stage Dockerfile + read_only/tmpfs/cap_drop on backend + celery-worker (D-07, D-08, D-09)
+- [x] 06-05-PLAN.md — Trusted-proxy get_client_ip body + per-account rate limiter on document/cloud endpoints (D-11, D-12, D-13)
 
 **Wave 3** *(blocked on Wave 2 completion)*
 
-- [ ] 06-06-PLAN.md — docker scout CVE gate + RUNBOOK.md (D-10, D-14)
+- [x] 06-06-PLAN.md — docker scout CVE gate + RUNBOOK.md (D-10, D-14)
 
 **Cross-cutting constraints:**
 
diff --git a/.planning/STATE.md b/.planning/STATE.md
index 807dad3..3b00d51 100644
--- a/.planning/STATE.md
+++ b/.planning/STATE.md
@@ -4,7 +4,7 @@ milestone: v1.0
 milestone_name: "audit gaps: SHARE-02/STORE-06/ADMIN-06"
 current_phase: 7
 status: executing
-last_updated: "2026-06-04T16:41:01.409Z"
+last_updated: "2026-06-04T19:13:00.000Z"
 progress:
   total_phases: 3
   completed_phases: 2
@@ -29,7 +29,7 @@ progress:
 | 3 | Document Migration & Multi-User Isolation | ✓ Complete (5/5 plans, UAT passed, security gate passed) |
 | 4 | Folders, Sharing, Quotas & Document UX | ✓ Complete (9/9 plans, UAT 14/15 passed, 1 bug fixed) |
 | 5 | Cloud Storage Backends | ✓ Complete (12/12 plans, UAT 5/6 passed, 3 gaps closed by 05-12) |
-| 6 | Performance & Production Hardening | Not started |
+| 6 | Performance & Production Hardening | ✓ Complete (6/6 plans, UAT passed, CVE gate passed) |
 | 6.1 | Close v1.0 audit gaps: SHARE-02/STORE-06/ADMIN-06 | ✓ Complete (2/2 plans) |
 | 6.2 | Close v1 sharing + cloud-delete + CSV export gaps | ✓ Complete (5/5 plans, UAT passed, security gate passed) |
 | 7 | Redo and Optimize LLM Integration | Planned (5/5 plans, verification passed) |