diff --git a/docs/waves/wave-10.md b/docs/waves/wave-10.md
index 1c4aec5..0aa41b1 100644
--- a/docs/waves/wave-10.md
+++ b/docs/waves/wave-10.md
@@ -314,7 +314,7 @@ preservation.
 - [x] the empty-password case is proved by nulling `Connection`, so any call to `bind()` would raise — it asserts the guard returns *before* the transport, not merely that the result is a failure
 - [x] `smoketest.py` and `seed_demo.py` document which credentials they now need (T10.8)
 - [x] the removed password-reset checks are called out, not silently dropped — `console_dialogs_check.py`'s docstring records the coverage loss and where the prompt kit is still covered
-- [ ] the full `tests/` suite passes with no DC reachable — 8 of ~40 run so far, all green; full sweep running
+- [x] the full `tests/` suite passes with no DC reachable — **1284/1288 checks across 40 files**, Aug 24. Two files fail, both proven pre-existing and unrelated (`BL-028` `assets_check`, `BL-029` `generalinfo_check`): `git diff main...HEAD` shows this branch touches neither file. `token_check.py` is not a member of the suite — it is a capture/diff tool that requires `--out` or `--compare`, and a sweep script that runs it bare gets a usage message and exit 2.
 
 **Scope note.** This task was estimated as far larger than it turned out to be. The
 premise was that four checks sign in and would all need the seam; in fact `seed()` mints