diff --git a/website/DEMO_MODE.md b/website/DEMO_MODE.md
index bcfc2ea..2322ede 100644
--- a/website/DEMO_MODE.md
+++ b/website/DEMO_MODE.md
@@ -460,7 +460,11 @@ through that proxy.
    that cannot be read never unlocks the file. A config that does not parse is withheld whole on the
    demo, because its secrets cannot be found to redact.
 3. **Kit** (`Integration-kit`): a paragraph on `demoLocks` and `ctx.demoMode`, and the
-   `core-ref.json` re-pin. One PR.
+   `core-ref.json` re-pin. One PR. **Built 2026-10-26** as `Integration-kit#17`, pinned to the
+   sha `website#224` merged as (1.19.0). Chapter 2 gains a section on a public demo site, which
+   also covers `onDemoSeed` (DM15), and chapter 5 covers `demoRefuses` (DM18). Both hooks were
+   decided after this list was written. Module-Rust's own pin moved to the same sha in
+   `Module-Rust#63`.
 4. **App** (`Android-app`): the `DEMO_LOCKED` error kind and the banner on Home. One PR.
 5. **Deployment** (`website`): `deploy/demo/`, `demo-wipe.yml` (with §7.5's bundle step) and
    `demo-baseline.yml`; the first deploy on `demo-site`; setting up the default set and capturing