diff --git a/README.md b/README.md
index 161c80c..ba7cf81 100644
--- a/README.md
+++ b/README.md
@@ -3,24 +3,24 @@
 This public repository is the standalone owner of the CordisX CLIProxyAPI
 provider sessions plugin.
 
-## Migration status
+## Delivery status
 
-This branch contains the extracted renderer and an executable package-v9
-`platform-provider` service candidate. The renderer uses only public Host React,
-UI, and `ctx.platform` contracts. The Node service uses only the public Protocol
-broker and `ctx.platformProviders.register`; CLIProxy method declarations,
-response projection, lifecycle, and approval adaptation live here.
+The standalone renderer and executable package-v9 `platform-provider` service
+are merged on `main`. The renderer uses only public Host React, UI, and
+`ctx.platform` contracts. The Node service uses only the public Protocol broker
+and `ctx.platformProviders.register`; CLIProxy method declarations, response
+projection, lifecycle, and approval adaptation live here.
 
-The Host still owns endpoint and credential resolution, process startup, opaque
+The Host owns endpoint and credential resolution, process startup, opaque
 workspace handles, method/schema policy, configuration persistence, and the
 single Provider Fleet. The plugin receives no endpoint, credential, process,
 filesystem path, raw transport, or Fleet handle.
 
-The candidate pins Protocol `f9b57a6dc665ff471c9bda06d4923be6e2e03b6a`.
-It remains private and unmerged until the matching Host service loader and
-broker authority are formally merged. The branch consumes the formal Protocol v2 safe factory projection so each
-Host-validated provider model mapping reaches the plugin without exposing raw
-service configuration. Protocol v2 is pinned at `cbfd15ef4d2f51bcffa659f393cd65730bbe5f0d`; the matching Host v2 implementation must still be formalized before this plugin can merge.
+The plugin pins Protocol `06277f9d117893a9215c991db8c0881df0f0b0f3` and
+the formal Host v2 and Codex app-server broker implementation
+`cb4d35d8e5a3632c18358ab9d9d04c4dec63e090`. The package remains `private`
+to prevent npm publication; its manifest declares explicit local source
+distribution, and no packaged installer is available yet.
 
 ## Development
 
@@ -33,7 +33,7 @@ npm run dev:dry-run
 ```
 
 `npm run dev:dry-run` validates the local source graph without launching Codex
-Desktop. The package remains `private` while the migration is incomplete.
+Desktop. The package remains `private`; use the explicit local source distribution described by the package manifest.
 
 ## Provenance and license
 
diff --git a/README.zh-Hans.md b/README.zh-Hans.md
index 19e8eb5..2e7ff1b 100644
--- a/README.zh-Hans.md
+++ b/README.zh-Hans.md
@@ -1,20 +1,22 @@
 # CLIProxy Providers
 
-此公开仓将成为 CordisX CLIProxyAPI Provider 会话插件的独立 owner。
+此公开仓是 CordisX CLIProxyAPI Provider 会话插件的独立 owner。
 
-## 迁移状态
+## 交付状态
 
-当前分支已经包含拆出的 renderer，以及可执行的 package-v9
-`platform-provider` 服务候选。Renderer 只使用公开的 Host React、UI 和
-`ctx.platform` 合同；Node 服务只使用公开 Protocol broker 与
-`ctx.platformProviders.register`。CLIProxy 的方法声明、响应投影、生命周期和审批适配均由本仓库维护。
+独立 renderer 与可执行的 package-v9 `platform-provider` 服务已经合入 `main`。
+Renderer 只使用公开的 Host React、UI 和 `ctx.platform` 合同；Node 服务只使用
+公开 Protocol broker 与 `ctx.platformProviders.register`。CLIProxy 的方法声明、
+响应投影、生命周期和审批适配均由本仓库维护。
 
-Host 继续负责 endpoint 与凭据解析、进程启动、不透明 workspace handle、方法/Schema
-策略、配置持久化和唯一的 Provider Fleet。插件不会获得 endpoint、凭据、进程、文件系统路径、原始 transport 或 Fleet handle。
+Host 负责 endpoint 与凭据解析、进程启动、不透明 workspace handle、方法/Schema
+策略、配置持久化和唯一的 Provider Fleet。插件不会获得 endpoint、凭据、进程、
+文件系统路径、原始 transport 或 Fleet handle。
 
-候选精确固定 Protocol `f9b57a6dc665ff471c9bda06d4923be6e2e03b6a`。
-在匹配的 Host 服务装载器和 broker authority 正式合入前，包保持 private 且 PR 不合入。
-当前分支消费正式的 Protocol v2 安全 factory projection，让 Host 校验后的模型映射进入插件，同时不暴露原始服务配置。Protocol v2 已精确固定为 `cbfd15ef4d2f51bcffa659f393cd65730bbe5f0d`；匹配的 Host v2 实现正式合入后，本插件才可合入。
+插件精确固定 Protocol `06277f9d117893a9215c991db8c0881df0f0b0f3`，并依赖
+已正式合入的 Host v2 与 Codex app-server broker
+`cb4d35d8e5a3632c18358ab9d9d04c4dec63e090`。包继续保持 `private` 以阻止 npm
+发布；manifest 声明显式本地源码分发，目前仍未提供安装包。
 
 ## 开发