diff --git a/CLAUDE.md b/CLAUDE.md
index fc6264f..3844814 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -55,8 +55,10 @@ credentials that legitimately require a human. See `docs/ROTATION.md` Part II.
   `internal/tui` → `incredigo worklist` / `incredigo guide` (read-only).
 - **Phase B scaffolded, not wired:** 12 pwstore adapters, pwgen, staging;
   `incredigo passwords pw-*` flow incomplete (ROADMAP M4).
-- **Known weak spots:** sink 30% / cmd 4.3% coverage, no CI, lab-provision scripts
-  not in repo (ROADMAP M0–M1).
+- **Known weak spots:** policy 66% / tui 57% coverage; coverage floors reported by
+  `make check-cover` but not yet CI-enforced; lab-provision scripts not in repo
+  (ROADMAP M0–M1). (sink 30%→85%, cmd 4.3%→34.5%, gitea CI + Makefile added
+  2026-07-15.)
 
 ## Hard rules (do not violate — this tool holds real credentials)