diff --git a/operator-token-runbook.md b/operator-token-runbook.md
index 450ad76..efe050d 100644
--- a/operator-token-runbook.md
+++ b/operator-token-runbook.md
@@ -3,19 +3,6 @@
 How the co-op's Cloudron credentials are organized, and how to rotate them
 without breaking the stack.
 
-## Cloudron 10 follow-ups (tracked, Sept 2026)
-
-One item remains from the Cloudron 10 release.
-
-1. **Migrate webmail off SnappyMail → Cloudron "Mail".** SnappyMail (RainLoop's
-   fork) is abandoned; Cloudron built its own replacement, "Mail," but it is
-   still catching up on features (their words). Keep SnappyMail for now; migrate
-   `mail.inference.coop` once "Mail" is feature-complete. Until then SnappyMail
-   is a known unmaintained dependency.
-
-~~2. Migrate `dashboard` + `panel` from `proxyAuth` → OIDC.~~ **Done** — both
-custom apps are on OIDC now (Sept 2026).
-
 ## The two-token split
 
 There are **two separate** Cloudron API tokens, deliberately decoupled so