diff --git a/modules/rust/PLAN_LAST_FIXES.md b/modules/rust/PLAN_LAST_FIXES.md
index 903c797..2a3e9c3 100644
--- a/modules/rust/PLAN_LAST_FIXES.md
+++ b/modules/rust/PLAN_LAST_FIXES.md
@@ -2,8 +2,8 @@
 
 **Status:** **all six stages done, 2026-10-22.** Every fix in §3 is built, and §8 names the PR for each. The
 questions in §5 were answered on 2026-10-21, and the stage 4 decisions on 2026-10-22. **Stage 6 released
-protocol 14 and cut the Rust repositories and website over to `main` the same day (§8.1).** §7's clean-up comes
-next, on the org lead's go. Written 2026-10-21 after the end
+protocol 14 and cut the Rust repositories and website over to `main` the same day (§8.1).** §7's clean-up was
+done the same day; the org lead rotates the Steam key himself. Written 2026-10-21 after the end
 walk's in-game pass, as a plan. It continues
 [`PLAN_REDESIGNS.md`](PLAN_REDESIGNS.md) §9.1, which lists W1–W20 and N1 from the passes without a player. This
 document adds what the in-game pass found and puts everything in one list, in the order it should be built.
@@ -181,6 +181,16 @@ site, so neither is in this list:
 - **The rigs' bridge:** done in stage 6 (§8.1). Both rigs run the released files of bundle 2026.10.22.
 - **W21** landed in stage 1 (Module-Rust#54), so the walk site's hand patch is no longer needed.
 
+**Done 2026-10-22, except the Steam key, which the org lead rotates himself.**
+
+- **Walk site:** A's two grants were deleted (#5 `backpacks.use` on rust-oxide, from staff; #7 `backpacks.use`
+  on rust-carbon, an event give). A sync then applied one revoke on each rig, and both read in sync. The walk
+  site runs Module-Rust v0.5.0 byte for byte as released, so the W21 hand patch is gone with it.
+- **Oxide rig:** `removeowner` and `server.writecfg` left `users.cfg` empty. RgKitProbe and RgWalk were deleted,
+  and Oxide unloaded both. RaidableBases' config was restored from the walk's backup, so its only difference was
+  that Easy and Medium went back to 0. The server was then saved and restarted. RaidableBases 3.2.2 loaded with
+  no errors, the config was still at 0 after the boot, and neither walk plugin came back.
+
 ---
 
 ## 8. What was built