diff --git a/.planning/phases/19.4-oidc-provider-on-wristband/19.4-UAT.md b/.planning/phases/19.4-oidc-provider-on-wristband/19.4-UAT.md
index 6c345b15..c66882df 100644
--- a/.planning/phases/19.4-oidc-provider-on-wristband/19.4-UAT.md
+++ b/.planning/phases/19.4-oidc-provider-on-wristband/19.4-UAT.md
@@ -33,4 +33,8 @@ pending: 0
 skipped: 0
 blocked: 0
 
+## Notes
+
+- 2026-10-19, during test 1: the user approved pushing sm-user-plugin (merge 4c5d3b8) and creating and pushing sm-oauthserver-plugin, so the plugin could be mounted in sm-demo-app (commit e64dd0c there, not pushed). Plans 02-04 prohibitions on pushing describe the phase execution; these pushes came after it, at the user's request. No tag, no deploy.
+
 ## Gaps