diff --git a/docs/waves/wave-10.md b/docs/waves/wave-10.md
index 160fdcc..a7d2eef 100644
--- a/docs/waves/wave-10.md
+++ b/docs/waves/wave-10.md
@@ -86,6 +86,15 @@ Depends only on `main` as it stands after `D15`. Not sequenced behind any other
   surviving unchanged, same-site vs. off-site `?next=`, and `OKTA_IDENTITY_CLAIM`
   genuinely working under a non-default claim name — 22/22.
 
+  The dev sandbox this was built in has no headless browser and no way to install
+  one, so `tests/url_state_check.py` and `tests/browser_check.py` (both need
+  `tests/cdp.py`'s real headless Chromium) could not be run there — only
+  `okta_auth_check.py`'s HTTP-level coverage of the same mechanism. Run for real
+  afterward on a machine with Docker, via a separate general-purpose tool
+  (`headless-py-test-runner`, kept out of this repo — it is not Work Package Suite
+  specific): `url_state_check.py` 26/26, including scenario 2's real click-through of
+  the fake-Okta round trip, and `browser_check.py` 71/71. Gap closed.
+
 - **T10.8 — Verification.** 390px and 1440px, full suite, done-when checks per task,
   matching the rigor D13 was held to.