diff --git a/.github/LOCAL_CI_RESULTS.md b/.github/LOCAL_CI_RESULTS.md
index 12ac3cf..6806d92 100644
--- a/.github/LOCAL_CI_RESULTS.md
+++ b/.github/LOCAL_CI_RESULTS.md
@@ -45,6 +45,13 @@
 > and `cmake-multi-platform.yml`, so a manual hosted run can be triggered as soon as
 > Actions is unblocked.
 
+> **Correction (2026-10-03): the note above is superseded.** The cause was not a billing
+> lock: GitHub Actions was disabled at the repository level, and it was re-enabled on
+> 2026-09-25 (`Documentation/DCF_CODE_REVIEW.md` R1). Hosted runs on `main` at `09866ca`
+> (2026-09-26): `Wire Certification` run `36275105961`, `CI` run `36275105998` and
+> `CMake on multiple platforms` run `36275106001` all passed. The attestations in this
+> file stay as dated local records.
+
 The Wire Certification workflow (`.github/workflows/wire-certify.yml`) was executed
 **locally**, job-for-job, instead of on GitHub Actions. Toolchains not installed on
 the host were supplied hermetically with Nix (`nix shell nixpkgs#…`), exactly the
diff --git a/.github/ci-local.sh b/.github/ci-local.sh
index e4e2538..1cc80cc 100755
--- a/.github/ci-local.sh
+++ b/.github/ci-local.sh
@@ -12,8 +12,9 @@
 # and a summary follows. Exit status is non-zero iff a job FAILED (SKIP does not fail).
 # A PASS with a "partial:" note ran every step except the ones named there.
 #
-# Hosted Actions have never run a real job for this repo (billing lock since 2026-06);
-# until that clears, this script + .github/LOCAL_CI_RESULTS.md are the path of record.
+# Hosted Actions run wire-certify.yml since 2026-09-25 (Actions had been disabled at
+# the repository level; Documentation/DCF_CODE_REVIEW.md R1). This script is the local
+# complement: the same jobs, without a push.
 #
 #   make ci-local                              # or: bash .github/ci-local.sh
 #   bash .github/ci-local.sh certify-medium io-matrix   # run only the named jobs
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
index 8918f66..f932ad2 100644
--- a/ARCHITECTURE.md
+++ b/ARCHITECTURE.md
@@ -102,10 +102,10 @@ pair of the five CLIs over file, stdio, UDP proto/bare and HydraModem WAV).
 The thing that keeps a polyglot codebase honest is a **finite golden-vector
 certificate**: matching all vectors ≡ agreeing with the reference on the entire
 input space. See [`CONTRIBUTING.md`](CONTRIBUTING.md) for the commands. CI
-(`.github/workflows/wire-certify.yml`) is written to regenerate and diff on every
-push/PR, but hosted Actions has never executed a job on this repository (an account
-billing lock); until that clears, `make ci-local` and the dated attestations in
-`.github/LOCAL_CI_RESULTS.md` are the certification path of record.
+(`.github/workflows/wire-certify.yml`) regenerates and diffs on every push/PR, and has
+run on hosted Actions since 2026-09-25 (Actions had been disabled at the repository level
+until then; `Documentation/DCF_CODE_REVIEW.md` R1). `make ci-local` and the dated
+attestations in `.github/LOCAL_CI_RESULTS.md` are the local complement.
 
 - `Documentation/golden_vectors.json` — 246-vector wire certificate.
 - `Documentation/audio_vectors.json` (+ `pm_param_vectors.json`) — audio L2 framing.
diff --git a/CLAUDE.md b/CLAUDE.md
index 31c71f0..1f19e39 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -77,10 +77,13 @@ cd codec && cargo test --test certify              # Rust
 ```
 
 CI: `.github/workflows/wire-certify.yml` runs Python/C/Rust certs on push/PR to
-`main` and diffs regenerated vs committed vectors. **Hosted Actions has never executed a
-real job here** (all 57 runs, 2026-06-10→06-21, died at startup under an account billing
-lock; none since) — until billing is cleared, `make ci-local` + `.github/LOCAL_CI_RESULTS.md`
-is the attested certification path.
+`main` and diffs regenerated vs committed vectors. **Hosted Actions runs here since
+2026-09-25.** Before that, Actions was disabled at the repository level, which is why all
+57 runs of 2026-06-10→06-21 died at startup; the earlier "billing lock" reading was wrong
+(`Documentation/DCF_CODE_REVIEW.md` R1). On `main` at `09866ca` (2026-09-26) `Wire
+Certification`, `CI` and `CMake on multiple platforms` all passed, and `interop` runs
+daily on a schedule. `make ci-local` + `.github/LOCAL_CI_RESULTS.md` remain the local
+path, a complement to hosted runs.
 
 > Canonical Python lives in `python/MCP/` (the old `GUI/MCP/*` dangling symlinks
 > were removed). `C_SDK/tests/test_wire_certify.c` is fixed and certifies against