diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md
index 167829b..b7585b6 100644
--- a/.planning/ROADMAP.md
+++ b/.planning/ROADMAP.md
@@ -899,7 +899,7 @@ Plans:
   5. `docs/setup/installation.md` leads with the one-liner, `go-modules-and-workspaces.md` and the console docs cover `summer new`, and `llms.txt`/`llms-full.txt` include the changes; docs checks pass.
   6. Generator Go tests (golden output plus a real build of the scaffold in a temp dir) are the last plan.
 
-**Plans:** 3/4 plans executed
+**Plans:** 4/4 plans executed
 
 Plans:
 
@@ -913,7 +913,7 @@ Plans:
 - [x] 14.3-03-PLAN.md — Docs (installation one-liner first, go modules, console, llms) and landing page "Get started" with its tests
 
 **Wave 4** *(blocked on Wave 3 completion)*
-- [ ] 14.3-04-PLAN.md — Unit tests last: goldens, real builds, error cases, script matrix, phase gate; post-phase release checklist (tag v0.1.13, site bump, deploy are user actions)
+- [x] 14.3-04-PLAN.md — Unit tests last: goldens, real builds, error cases, script matrix, phase gate; post-phase release checklist (tag v0.1.13, site bump, deploy are user actions)
 
 ### Phase 15: Journal plugin
 
@@ -1089,7 +1089,7 @@ Phases execute in numeric order: 1 → 2 → 3 → 4 → 5 → 6 → 7 → 8 →
 | 14. Domain jobs and external integrations | 6/6 | In Progress|  |
 | 14.1. OAuth identities and fonoteka me routes (INSERTED) | 2/2 | Complete    | 2026-10-05 |
 | 14.2. Local Fonoteka frontend on local SummerCMS backend (INSERTED) | 0/TBD | Not started | - |
-| 14.3. One-command app scaffolding (INSERTED) | 3/4 | In Progress|  |
+| 14.3. One-command app scaffolding (INSERTED) | 4/4 | In Progress|  |
 | 15. Journal plugin | 4/4 | Complete   | 2026-10-06 |
 | 16. grzybyfunkcjonalne.pl on reusable blog views | 0/TBD | Not started | - |
 | 17. Blog companions | 0/TBD | Not started | - |
diff --git a/.planning/STATE.md b/.planning/STATE.md
index 2248452..dcff035 100644
--- a/.planning/STATE.md
+++ b/.planning/STATE.md
@@ -3,17 +3,17 @@ gsd_state_version: "1.0"
 milestone: v1.0
 current_phase: "14.3"
 current_phase_name: "One-command app scaffolding: summer new and summercms.io/new bootstrap script"
-status: executing
-stopped_at: Completed 14.3-03-PLAN.md
-last_updated: "2026-10-08T10:10:08.642Z"
+status: verifying
+stopped_at: Completed 14.3-04-PLAN.md
+last_updated: "2026-10-08T10:32:08.732Z"
 last_activity: 2026-10-08
 last_activity_desc: Phase 14.3 execution started
-state_head: e2c8852b4cd0c167e1efcd51ed474cb95762be00
+state_head: 9dac7b8f67e4345c93e778b17c50ab6fd399d343
 progress:
   total_phases: 31
   completed_phases: 13
   total_plans: 143
-  completed_plans: 138
+  completed_plans: 139
 milestone_name: milestone
 ---
 
@@ -30,7 +30,7 @@ See: .planning/PROJECT.md (updated 2026-09-16)
 
 Phase: 14.3 (One-command app scaffolding: summer new and summercms.io/new bootstrap script) — EXECUTING
 Plan: 4 of 4
-Status: Ready to execute
+Status: Phase complete — ready for verification
 Last activity: 2026-10-08 — Phase 14.3 execution started
 
 Progress: [██████████] 100%
@@ -192,6 +192,7 @@ Progress: [██████████] 100%
 | Phase 14.3 P01 | 13 min | 3 tasks | 17 files |
 | Phase 14.3 P02 | 11 min | 3 tasks | 11 files |
 | Phase 14.3 P03 | 9min | 3 tasks | 13 files |
+| Phase 14.3 P04 | 19min | 3 tasks | 32 files |
 
 ## Accumulated Context
 
@@ -614,6 +615,9 @@ Recent decisions affecting current work:
 - [Phase 14.3]: Bootstrap script lives in modules/sunrise (new.sh + Script()); served by the site plugin at GET /new as text/plain
 - [Phase 14.3]: new.sh installs summer with GOWORK=off and never deletes, resets or force-fetches; refusals for branch, dirty, moved-tag and non-fast-forward checkouts
 - [Phase 14.3]: 14.3-03: the gated terminal check stops summer serve's app binary (pkill -P) before summer, since summer serve has no signal handling
+- [Phase 14.3]: Phase 14.3 gate is scripts/check-phase14.3.sh --all: one process per stage (unit, generator, bootstrap, terminal, acceptance, security), a named PASS line per required test, goldens unchanged by the run
+- [Phase 14.3]: summer new goldens live in internal/build/testdata/new and new-no-plugin and are rewritten only with go test -update; the golden app key is base64 of bytes 0x00..0x1f
+- [Phase 14.3]: Tests that commit in temp git repos disable detached auto maintenance (maintenance.auto=false, gc.auto=0) to avoid cleanup races with git 2.55
 
 ### Pending Todos
 
@@ -676,6 +680,6 @@ Items acknowledged and carried forward from previous milestone close:
 
 ## Session Continuity
 
-Last session: 2026-10-08T10:10:08.039Z
-Stopped at: Completed 14.3-03-PLAN.md
+Last session: 2026-10-08T10:32:00.180Z
+Stopped at: Completed 14.3-04-PLAN.md
 Resume file: None