diff --git a/MIGRATION.md b/MIGRATION.md
index f64ee4e..c79f906 100644
--- a/MIGRATION.md
+++ b/MIGRATION.md
@@ -14,30 +14,27 @@ Every repository that needs CI/CD on the new system, and its state. The old syst
 
 | Repository | Workflow | State |
 |---|---|---|
-| KofTwentyTwo/cluster-gitops | manifests.yaml | PR #298 (render + blueprint lint + secret scan) |
-| KofTwentyTwo/Website-Backend | container.yaml | PR #344 green; merge, then turn on GitOps deploy |
+| KofTwentyTwo/Website-Backend | container.yaml + GitOps | **Done**: deploys from main (prod on run-74, 2026-11-07) |
+| KofTwentyTwo/cluster-gitops | manifests.yaml | **Done** (#298, allowlist #299); maven-proxy fix #301 awaiting owner merge |
+| KofTwentyTwo/investinginchester | container.yaml + GitOps | On Gitea image in prod (cluster-gitops #300); auto-deploy PR #12 needs `GITOPS_TOKEN` |
+| KofTwentyTwo/nuncio-website | container.yaml + GitOps | Merged; image builds; deploy needs `GITOPS_TOKEN` |
+| KofTwentyTwo/theimpactbuilding | container.yaml + GitOps | On develop; main PR #6 needs `GITOPS_TOKEN` first |
+| QRun-IO/qqq-all, qqq-business-platform, qqq-cli, qqq-print-protocol | maven.yaml / container.yaml | Being migrated |
 
 ## To migrate (after the baseline is stable)
 
 | Repository | Type | Needs | Notes |
 |---|---|---|---|
-| KofTwentyTwo/nuncio-website | website, deploys | container.yaml + GitOps | was on kof publisher |
-| KofTwentyTwo/theimpactbuilding | website, deploys | container.yaml + GitOps | was on kof publisher |
-| KofTwentyTwo/investinginchester | website, deploys | container.yaml + GitOps | had its own release.yaml |
-| QRun-IO/qqq-all | app image + smoke tests | container.yaml (+ prebuild smokes) | image `qqq-all:develop` |
 | QRun-IO/qqq-frontend-core | npm library | new npm workflow | published via qqq publisher |
 | QRun-IO/qqq-android | Android AAR | new Gradle/Android workflow | android-build runner label |
-| QRun-IO/qqq-cli | CLI releases | decide: maven.yaml or native | |
 | QRun-IO/scoop-bucket | Windows Scoop bucket | small scoop workflow | 4 old workflows removed |
 | QRun-IO/qqq-print-agent | Windows .NET client | native Windows workflow | needs Windows runner |
-| QRun-IO/qqq-print-protocol | protocol library | decide type | |
 | KofTwentyTwo/AppKit, MetalPOC, VisionPOC | macOS/native | native macOS workflow | macOS runner |
 | KofTwentyTwo/standards | docs/standards checks | small lint workflow | |
 | KofTwentyTwo/obsidian-penny | Obsidian plugin (Node) | node workflow | |
 | KofTwentyTwo/Lukes-Rocket-Launcher | CMake/PlatformIO firmware | small build workflow | |
 | QRun-IO/ci-qualification | old CI qualification | probably retire | |
 | QRun-IO/Voyage | app image + deploy | container.yaml + GitOps | parked: app broken (replicas 0) |
-| QRun-IO/qqq-business-platform | app (e2e) | maven.yaml verify | no image path today |
 
 Plus: an inventory of every remaining repository that has no workflow at all (decide CI or none).