diff --git a/docs/plans/PLAN-tool-er-framework.md b/docs/plans/PLAN-tool-er-framework.md
index d3a3ee8..95f8273 100644
--- a/docs/plans/PLAN-tool-er-framework.md
+++ b/docs/plans/PLAN-tool-er-framework.md
@@ -290,6 +290,18 @@ no build started. This section is the handoff point for any future session.
 - 2026-09-06: Plan authored and committed to _shared (617695c); tooler-dom
   removed per decision c (258e3c7); review notes + this section committed
   (see artifacts).
+- 2026-09-07: QA pass (independent reviewer) -> Verdict: PASS WITH CHANGES.
+  Report: docs/plans/qa/PLAN-tool-er-framework-qa.md (committed 095728c).
+  Top fixes: (1) add explicit owner Gate line at each phase end (SS5 lists
+  phases but the gate is only stated in SS9); (2) specify consumer pin-bump
+  policy (CJS 0.13.35 apps adopting ESM 0.20.41 libs — dual-SDK risk, S0
+  proved build not test); (3) Phase 0 tasks authoring AGENTS.common.md +
+  extend .gitignore with .claude/.cursor/.impeccable. Open questions:
+  OQ-1 consumer pin bump vs duck-typing vs two-step; OQ-2 gallery.json
+  vendoring; OQ-3 parseEmbed home (scan vs publish vs out-of-cycle);
+  OQ-4 tooler-bot TS vs JS. Full details in the QA report.
+- 2026-09-07: Red-team pass running in parallel (ledger OUTSIDE git, in
+  ~/dev/_shared-redteam/); results pending - update this log when they land.
 
 ### Artifacts (durable — all committed to Tangled _shared, public)
 - This plan: docs/plans/PLAN-tool-er-framework.md (258e3c7).