diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7cc2f63d7..3e0bc893e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,8 +21,8 @@ Measured on this branch; re-run with `bun test`, `time bin/gstack-wtree`, and th
 | "Tests passed" binding | none (prose) | content fingerprint + command hash + max-age | new |
 | Tracker-text ingress points enveloped | 0 | 8, CI-scanner enforced | new |
 | /freeze deny on hostile/edge paths | silent no-op | blocks, fail-closed | fixed |
-| Working-tree fingerprint cost | — | ~0.2s warm (stat-cache seeded, 40x vs naive) | new |
-| Adversarial findings fixed pre-merge | — | 36 (4 specialists + red team), 5 critical | — |
+| Working-tree fingerprint cost | — | ~0.09s warm (stat-cache seeded, 40x vs naive) | new |
+| Adversarial findings fixed pre-merge | — | 50 (4 specialists + red team + fresh-context pass), 6 critical | — |
 
 The fingerprint survives commits of identical content, so the common flow — test on a dirty tree, commit, ship — keeps its evidence valid, while one untracked new source file invalidates it.
 
diff --git a/guard/SKILL.md b/guard/SKILL.md
index d9ae63de8..7425b789f 100644
--- a/guard/SKILL.md
+++ b/guard/SKILL.md
@@ -80,7 +80,7 @@ echo "Freeze boundary set: $FREEZE_DIR"
 
 Tell the user:
 - "**Guard mode active.** Two protections are now running:"
-- "1. **Destructive command warnings** — rm -rf, DROP TABLE, force-push, etc. will warn before executing (you can override)"
+- "1. **Destructive command guard** — rm -rf, DROP TABLE, force-push, etc. warn before executing (overridable); catastrophic shapes (recursive delete of / or ~, force-push to the default branch) are hard-denied"
 - "2. **Edit boundary** — file edits restricted to `<path>/`. Edits outside this directory are blocked."
 - "To remove the edit boundary, run `/unfreeze`. To deactivate everything, end the session."
 
diff --git a/guard/SKILL.md.tmpl b/guard/SKILL.md.tmpl
index 3d34ee0c1..d4c78be49 100644
--- a/guard/SKILL.md.tmpl
+++ b/guard/SKILL.md.tmpl
@@ -76,7 +76,7 @@ echo "Freeze boundary set: $FREEZE_DIR"
 
 Tell the user:
 - "**Guard mode active.** Two protections are now running:"
-- "1. **Destructive command warnings** — rm -rf, DROP TABLE, force-push, etc. will warn before executing (you can override)"
+- "1. **Destructive command guard** — rm -rf, DROP TABLE, force-push, etc. warn before executing (overridable); catastrophic shapes (recursive delete of / or ~, force-push to the default branch) are hard-denied"
 - "2. **Edit boundary** — file edits restricted to `<path>/`. Edits outside this directory are blocked."
 - "To remove the edit boundary, run `/unfreeze`. To deactivate everything, end the session."