diff --git a/AGENTS.md b/AGENTS.md
index 26f4ef2..12bd347 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -270,6 +270,24 @@ Hard-won operational gotchas. One line each; keep them short and load-bearing.
   REST API (`/api/`, `/api/config`, `/api/services`) with the long-lived
   token in `~/.creds/homeassistant.env`. Instance unit system is °F — set
   explicit `unit_of_measurement: "°C"` on custom sensors.
+- **HAOS core_ssh on 22222 is the sanctioned host shell:** `VM_IP=pfv-bms-lan.knel.net
+  VM_USER=root VM_PORT=22222 bash tests/remote.sh vm '...'` — use the LAN name
+  (knel.net zone is Tailscale-IP based; TS inbound to pfv-bms is unreliable).
+  Host OS has NO git/ssh/curl — run git against /mnt/data/supervisor/homeassistant
+  via `docker run homeassistant/amd64-addon-git_pull:<ver>`.
+- **Git pull add-on (core_git_pull) wipes /config on first run** if `.git` is
+  absent (rm -rf + fresh clone). ALWAYS pre-seed /config as a git checkout
+  (deploy key ~/.creds/pfv-bms-gitpull, repo KNEL/pfv-bms) before starting it.
+- **HA core boot death-spiral:** supervisor watchdog SIGTERMs slow boots
+  (docker logs: "finish process received signal 15" while supervisor logs
+  "Still waiting for Core to start"). Fix from the 22222 shell:
+  `ha ha options --watchdog=false`, start core, diagnose, re-enable once stable.
+- **Technitium on netinfra-02 (tsys-dns container) does not reload rsync-synced
+  zone files** — `docker restart tsys-dns` after record adds until #469 (native
+  clustering) lands. netinfra-01 (the dns-cli target) is fine.
+- **Supervisor add-on options via API:** docker cp a script into
+  hassio_supervisor, read token from /data/cli.json `access_token`, POST
+  /addons/<slug>/options (the /apps/ spelling 404s).
 
 ## Questions (NON-NEGOTIABLE)
 
diff --git a/WORKING.md b/WORKING.md
index 6ffef7e..fb7284e 100644
--- a/WORKING.md
+++ b/WORKING.md
@@ -5,6 +5,17 @@ A commit is blocked while any task below remains unchecked.
 
 ## Current Tasks
 
-- [x] BT dongle 047d:105e passthrough to pfv-bms VM 100 (usb2) [#344]
-- [x] DNS: pfv-bms-lan.knel.net A 192.168.3.12 (LAN path) [#344]
-- [x] remote.sh VM_PORT support (HAOS debug SSH 22222) [#344]
+(session state persisted to Redmine #344/#614/#454, Discourse audit #298 reply 46,
+inventory #307 v2, and git PFVCluster + KNEL/pfv-bms)
+
+- [x] BT dongle passthrough pfv-tsys1→VM100 usb2 (047d:105e) [#344]
+- [x] pfv-bms resize 2→4 vCPU, 4→6GB; HA crash-loop fixed (watchdog off, boot done) [#344]
+- [x] DNS pfv-bms-lan.knel.net A 192.168.3.12; netinfra-02 tsys-dns restart (stale zone) [#344]
+- [x] remote.sh VM_PORT support (22222) — commit 070172f [#344]
+- [x] Repo KNEL/pfv-bms created (private); /config tarred out via SSH; pre-seeded as checkout [#344]
+- [x] core_git_pull wired: deploy key, 300s poll, auto-restart; end-to-end push→pull→restart verified [#344]
+- [x] core_samba configured (creds ~/.creds/pfv-bms-samba.env) + started, 445 open [#344]
+- [x] Plant automations retargeted Pushover → companion app (ultix_sidecar_new + allthes_ipad) [#344]
+- [x] HACS check: NOT installed (answer to founder) [#344]
+- [x] Midea minisplit dongle found on WiFi (c4:39:60:59:0c:01 / 192.168.1.149) → #614 updated
+- [x] Ticket #614 created (dynamic temp management); IaC items filed on #454; audit log #298