diff --git a/docs/upstream-harness.md b/docs/upstream-harness.md
index b3ed46e..9d692f6 100644
--- a/docs/upstream-harness.md
+++ b/docs/upstream-harness.md
@@ -53,7 +53,8 @@ separate injected metadata-commit failure test proves the archive
 does not publish or strand a segment durability boundary. Event-log and final
 state equivalence are covered by the pinned differential oracle below; strict
 lifecycle, compaction, and timestamp-import power loss are covered by the Linux
-tier below. Multi-seed determinism remains open.
+tier below. Seed-derived restart determinism is covered by the five-world
+predicate-kill tier below.
 
 The harness is intentionally runnable without internet after dependencies are
 cached. Start the pinned simulator with `GOPROXY=off go run ./cmd/simulator
@@ -213,8 +214,9 @@ canonical `(source, reason)` counter meets the upstream ledger floor.
 
 The differential tier alone does not claim filesystem durability. The strict
 Linux tier closes the pinned storage, lifecycle-power-loss, compaction, and
-timestamp-import mutation schedules. Multi-seed determinism remains explicit
-work in `semantic-parity.md`.
+timestamp-import mutation schedules. On 2026-07-21 the five-world predicate-
+kill tier passed again against candidate `8b04c42`; every selected real-process
+abort fired, recovered on the same disk, and matched the upstream oracle.
 
 ## HTTP and getBlock metrics contract