diff --git a/docs/CURRENT-STATUS.md b/docs/CURRENT-STATUS.md
index 72e87bd..cb77c30 100644
--- a/docs/CURRENT-STATUS.md
+++ b/docs/CURRENT-STATUS.md
@@ -1,5 +1,7 @@
 # Current status
 
+Current main commit: `2ec72f15a50881104ad03d92cde133d7a2351685`
+
 ## Release history
 
 - **RC1:** validation exposed a signed-receipt trust defect: important identities and authority claims were not all cryptographically bound. RC1 receipts are legacy unbound evidence and can never verify as trusted.
diff --git a/scripts/check-documentation-closure.mjs b/scripts/check-documentation-closure.mjs
index 98006fc..92a6914 100644
--- a/scripts/check-documentation-closure.mjs
+++ b/scripts/check-documentation-closure.mjs
@@ -5,7 +5,7 @@ for (const file of ["README.md", "CHANGELOG.md", "docs/CURRENT-STATUS.md", "docs
 }
 const status = await readFile(new URL("../docs/CURRENT-STATUS.md", import.meta.url), "utf8");
 if (status.includes("GitHub Release remain\n  unpublished")) throw new Error("AgentProof status still claims the GitHub prerelease is unpublished");
-for (const subject of ["0.1.0-rc.5", "npm prerelease remains unpublished", "repository_patch.v1"]) {
+for (const subject of ["2ec72f15a50881104ad03d92cde133d7a2351685", "0.1.0-rc.5", "npm prerelease remains unpublished", "repository_patch.v1"]) {
   if (!status.includes(subject)) throw new Error(`current status is missing required subject: ${subject}`);
 }
 console.log("documentation closure: ok");