diff --git a/docs/program/BloomOS_Work_Program_v3.json b/docs/program/BloomOS_Work_Program_v3.json
index 011f3cc8..dc6dbf3d 100644
--- a/docs/program/BloomOS_Work_Program_v3.json
+++ b/docs/program/BloomOS_Work_Program_v3.json
@@ -1165,12 +1165,13 @@
       ],
       "github_prs": [
         621,
-        624
+        624,
+        627
       ],
       "risk_tier": 3,
       "deployment_tier": "full",
       "device_gate_required": true,
-      "last_audited_main": "e66cfa710a5f37766130971ba050eeae41a8e562",
+      "last_audited_main": "4e0267c4d6e1457cb5d22a127003d7a978d9557b",
       "evidence": [
         "GitHub PR #621 removes the dormant whole-card FileBrowser HTTP executable, database, web theme, icon, first-run marker, boot initializer, and start/authentication code from newly assembled stable payloads while retaining fail-closed legacy entrypoints, listener detection, and process cleanup for rollback-compatible remnants on older cards; it removes 15 tracked files and 14910652 bytes",
         "the corrected stable inventory contains 333 components, 1975 files, and 261293981 bytes with 232 source-build and 101 unresolved components; 74 affected Shell tests, three RetroArch identity tests, CI ARM orchestration and risk-scope tests, Python compilation, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed",
@@ -1179,7 +1180,10 @@
         "GitHub PR #624 removes the inherited 653-byte unauthenticated-root Telnet environment launcher, dormant start code, stable Tweaks state and visible toggle, and current enablement instructions while preserving a safe retirement route, historical versioned Onion 4.2 documentation, stale-state migration cleanup, exact BusyBox telnetd detection and termination, standalone telnetd cleanup, and fail-closed legacy entrypoints; the stable inventory falls to 333 components, 1974 files, and 261292177 bytes with 232 source-build and 101 unresolved components",
         "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 a9688c822c339f08c64b19a3dfc927a39ba23e53b4371000100155f53c7f4e53; 79 affected Shell tests, an amended seven-test listener suite, three RetroArch identity tests, scoped cppcheck, POSIX syntax, manifest, provenance, transfer policy, dependency inventory, and diff checks passed, and the exhaustive local Shell gate passed 811 of 811 tests across eight shards in 153.78 seconds without retry",
         "after one focused corrective commit preserved the public Telnet route as a retirement notice and fixed the initial broken Docusaurus backlink, GitHub checks passed with formatting in 26 seconds, AddressSanitizer in 1 minute 20 seconds, native tests in 1 minute 48 seconds, Docusaurus in 2 minutes 16 seconds, hosted Shell in 2 minutes 29 seconds, static analysis in 3 minutes 6 seconds, and ARM packaging in 4 minutes 40 seconds after exact trusted-cache hits; PR #624 merged by squash as e66cfa710a5f37766130971ba050eeae41a8e562",
-        "no device mutation was performed for PR #624; the older installed baseline's previously observed inherited Telnet listener is not claimed as remediated, the DISP-04 Shell overlay remains preserved, and NET-10 still requires the later coherent signed Full installation and rollback checkpoint"
+        "no device mutation was performed for PR #624; the older installed baseline's previously observed inherited Telnet listener is not claimed as remediated, the DISP-04 Shell overlay remains preserved, and NET-10 still requires the later coherent signed Full installation and rollback checkpoint",
+        "GitHub PR #627 removes the stale FileBrowser HTTP and authentication state plumbing, default-credential copy, submenus, and visible Tweaks entry after PR #621 retired its runtime payload, and replaces current enablement instructions with a safe retirement route pointing to key-only SSH and SFTP while preserving versioned Onion 4.2 history, stale-state migration cleanup, listener detection, and older-card process termination",
+        "the pinned Miyoo toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 binary with SHA-256 72b79a3edcefa7d002bdd916ec9d926f3b7c26d253400ab3a7bd682089743371; affected Shell, branding, CI scope and ARM orchestration, scoped cppcheck, and diff checks passed, and after a retained diagnostic identified and corrected one deterministic stale branding assertion the final exhaustive local Shell gate passed 811 of 811 tests across eight shards in 151.20 seconds",
+        "PR #627 also classifies website-only changes as risk zero with no ARM, cppcheck, native, ASan, or Shell work because Docusaurus owns that boundary; GitHub checks passed with static analysis in 21 seconds, formatting in 28 seconds, affected ARM in 43 seconds, native tests in 1 minute 45 seconds, Docusaurus in 2 minutes 6 seconds, AddressSanitizer in 2 minutes 7 seconds, and hosted Shell in 2 minutes 18 seconds; it merged by squash as 4e0267c4d6e1457cb5d22a127003d7a978d9557b, no device mutation occurred, and NET-10 remains in progress pending the coherent signed Full device checkpoint"
       ]
     },
     {