diff --git a/.planning/phases/14.2-local-fonoteka-frontend-on-local-summercms-backend/14.2-REVIEW-DISPOSITION.md b/.planning/phases/14.2-local-fonoteka-frontend-on-local-summercms-backend/14.2-REVIEW-DISPOSITION.md
index 4804e78..92d948e 100644
--- a/.planning/phases/14.2-local-fonoteka-frontend-on-local-summercms-backend/14.2-REVIEW-DISPOSITION.md
+++ b/.planning/phases/14.2-local-fonoteka-frontend-on-local-summercms-backend/14.2-REVIEW-DISPOSITION.md
@@ -17,7 +17,7 @@ findings:
     title: "Uploads route serves the stored content type verbatim on the app origin (stored XSS via text/html)"
   - id: WR-04
     severity: warning
-    disposition: open
+    disposition: fixed
     title: "`storage.uploads.public_path_prefix` is not validated: a non-path prefix either fails boot or silently 404s every upload"
   - id: WR-05
     severity: warning
@@ -83,9 +83,9 @@ findings:
     severity: info
     disposition: open
     title: "Test cleanups ignore errors; `goDir` mis-resolves a relative `E2E_GO_BIN`"
-open: 12
+open: 11
 total: 20
-recorded: 2026-10-12T10:23:09.664Z
+recorded: 2026-10-12T10:23:19.844Z
 ---
 
 # Phase 14.2: Code Review Disposition
@@ -95,7 +95,7 @@ recorded: 2026-10-12T10:23:09.664Z
 | WR-01 | warning | fixed | 14.2-REVIEW-FIX.md |
 | WR-02 | warning | fixed | 14.2-REVIEW-FIX.md |
 | WR-03 | warning | fixed | 14.2-REVIEW-FIX.md |
-| WR-04 | warning | open | - |
+| WR-04 | warning | fixed | 14.2-REVIEW-FIX.md |
 | WR-05 | warning | fixed | 14.2-REVIEW-FIX.md |
 | WR-06 | warning | fixed | 14.2-REVIEW-FIX.md |
 | WR-07 | warning | fixed | 14.2-REVIEW-FIX.md |