diff --git a/.context/PROJECT.md b/.context/PROJECT.md
index bc9f0ea..714e66f 100644
--- a/.context/PROJECT.md
+++ b/.context/PROJECT.md
@@ -60,8 +60,10 @@ candidate** (`oathcandidate/`, #8): it parses the committed `.gitea/workflows/cd
 the `oath` job actually exists and invokes `cmd/vargo-gate`, then posts the `var-go/oath` commit
 status. This is a real check (TDD'd: passes on the real file, fails closed on a fixture missing
 the job), not swedsl's toy self-test stub — swedsl#35 (import path) and swedsl#38 (real-candidate
-subprocess gating) unblocked it. Still **not** required by branch protection until proven green on
-a real PR (#8). Disclosed in the CI config comment, this doc, and `docs/INCEPTION-OATH.md`.
+subprocess gating) unblocked it. **Required by branch protection on `main`** (#8, closed
+2026-07-20), confirmed holding on a real PR. Direct pushes remain allowlisted for `mathias` per
+this repo's TBD convention. Disclosed in the CI config comment, this doc, and
+`docs/INCEPTION-OATH.md`.
 
 ## Brain references (source of truth — `brain_get <path>`)