diff --git a/.planning/debug/user-logout-session-stays-valid.md b/.planning/debug/resolved/user-logout-session-stays-valid.md
similarity index 99%
rename from .planning/debug/user-logout-session-stays-valid.md
rename to .planning/debug/resolved/user-logout-session-stays-valid.md
index 791a8f8e..aa324825 100644
--- a/.planning/debug/user-logout-session-stays-valid.md
+++ b/.planning/debug/resolved/user-logout-session-stays-valid.md
@@ -1,5 +1,5 @@
 ---
-status: awaiting_human_verify
+status: resolved
 trigger: "User plugin logout: auth cookies not invalidated at once; requests keep authenticating ~60 min until token expiry (todo 2026-10-22-user-logout-cookie-stays-valid)"
 created: 2026-10-22T00:00:00Z
 updated: 2026-10-22T00:00:00Z
diff --git a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md b/.planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md
similarity index 96%
rename from .planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md
rename to .planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md
index ce44c329..8b1eeabd 100644
--- a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md
+++ b/.planning/todos/completed/2026-10-22-user-logout-cookie-stays-valid.md
@@ -53,3 +53,5 @@ Released 2026-10-22: sm-user-plugin v0.1.8 (930b158, with SummerCMS v0.4.3); poi
 pushed in sm-demo-app (e587980, vue-demo-app 8f8e70d), sm-bm-app, sm-grzybyfunkcjonalne-app and
 sm-summercmsio-app; fonoteka.go not bumped (34 unpushed commits from another session). Remaining:
 deploy, then the hand check above; close the todo and the debug session after it.
+
+Closed 2026-10-28: manual post-deploy check (cookie-only logout, old cookie answers 401) done by the user.