diff --git a/TODO.md b/TODO.md
index 6e76883..0216074 100644
--- a/TODO.md
+++ b/TODO.md
@@ -538,7 +538,11 @@
 - Current state:
   - latest work in this environment has been pushed successfully multiple times after the earlier remote unpacker issue
   - the older push failure note is historical context only and should not be treated as the current repo state
-  - before the `2026-03-17` documentation-only update, push/auth from this specific machine had not yet been revalidated
+  - on `2026-03-17`, local commit `6e9d20b` (`Document fresh-machine setup and status`) was created successfully on this machine
+  - push from this machine is currently blocked because HTTPS auth is not configured here:
+    - `fatal: cannot exec '/usr/bin/ksshaskpass': No such file or directory`
+    - `fatal: could not read Username for 'https://git.savethenurse.com': No such device or address`
+  - until credentials are provided/configured, the latest documentation update remains local-only
 - Operational note:
   - because the frontend is static and aggressively cached, browser hard refreshes are often required after UI / modal / preview changes
 
@@ -616,6 +620,7 @@
   - Re-audited the repository structure and `TODO.md` handover state on a fresh machine.
   - Bootstrapped a user-local development toolchain because the machine initially lacked `go`, `pip`, `ffmpeg`, and `yt-dlp`.
   - Revalidated the documented self-test flow and updated this handover document with environment notes, current verification status, and next-step priorities.
+  - Committed the documentation update locally as `6e9d20b` (`Document fresh-machine setup and status`).
 - Why it changed:
   - Ongoing work will happen from different PCs, so the project needed an explicit record of what this repo requires to become runnable when root-level package installation is unavailable.
 - How it was verified:
@@ -627,6 +632,7 @@
 - What is still risky or incomplete:
   - This machine still has no `node`, so any future frontend build/lint workflow will need an explicit setup step before it can become part of local verification.
   - The environment bootstrap done here is user-local rather than repo-automated, so reproducing it on another PC is still partly manual until a bootstrap script or setup doc lands.
+  - Push of this update failed on this machine because Git HTTPS credentials / askpass integration are not configured yet, so the change is currently local-only.
 
 - Date: `2026-03-16`
 - What changed: