diff --git a/.superpowers/sdd/task-3-report.md b/.superpowers/sdd/task-3-report.md
index eafc1d7d..571dbbd8 100644
--- a/.superpowers/sdd/task-3-report.md
+++ b/.superpowers/sdd/task-3-report.md
@@ -40,7 +40,8 @@ that neither secret values nor bundle/file metadata are inherited by the Pi chil
 ## Commits
 
 - `70a19f2 feat(compose): use one secret bundle for local services`
-- pending follow-up: scrub DWH/vector/CA credentials from Pi child environment.
+- `d500563 fix(security): scrub deployment secrets from Pi child`
+- `8518a73 fix(security): scrub raw deployment secret values`
 
 ## Concern