diff --git a/PROJECT_STATE.md b/PROJECT_STATE.md
index f825047e..31f7239c 100644
--- a/PROJECT_STATE.md
+++ b/PROJECT_STATE.md
@@ -10,6 +10,28 @@
  Last updated: 2026-08-10 (final verification).
 > Point a fresh session here ("read PROJECT_STATE.md") before substantial work.
 
+### P3 effective configuration and `.tht-dwh` — implementation complete, automated PASS, manual PENDING (2026-08-11)
+
+- **Scope:** P3 (PRD D3): a versioned shared canonicalizer produces the non-secret effective
+  DWH/preprocessing configuration and a stable logical identity
+  (`workspace://<id>@v1:<sha256>`), used identically by the application sessions and the operator
+  CLI. `OWNER.json` writes are versioned; legacy roots remain readable; content-only/Evidence-only
+  changes keep the identity (no forced reconfiguration), while DWH-affecting changes fail closed
+  (never silently reusing the old generation).
+- **Memory:** explicit workspace-global `paths.memory` root with a guarded migration command
+  (`tht memory migrate`) that copies and verifies exactly one legacy JSONL under the workspace
+  lock and fails closed on conflicts.
+- **Revision-scoped records:** schema and Evidence Qdrant point IDs, payloads and queries include
+  `workspace_revision`; memory/solved stay workspace-wide.
+- **Operator contract:** `thothctl` now carries `effectiveConfigIdentity`/`configFingerprint`/
+  `inputFingerprint` in results; the operator config lease path is deterministic for the same
+  revision+identity.
+- **Retained evidence:** `.artifacts/p3-integration/p3-da9428d84f152fe059d41a89436496b7/`
+  (15/15 checks PASS), bound to clean source commit
+  `3b0726472e15c157…`.
+- **Manual gate:** P3 walkthrough in `docs/testing/p2-p6-manual-verification.md`; decision
+  **PENDING**. P4 starts only after an explicit new authorization.
+
 ### P2 host preprocessing CLI — implementation complete, automated PASS, manual PENDING (2026-08-11)
 
 - **Scope:** P2 (PRD D2, based on the P1.1 registry contract): the installed native `thothctl`