diff --git a/local/docs/NETWORKING-AND-DRIVERS-CODE-ASSESSMENT-2026-07-27.md b/local/docs/NETWORKING-AND-DRIVERS-CODE-ASSESSMENT-2026-07-27.md
index 9c495592d4..59ffe93fa4 100644
--- a/local/docs/NETWORKING-AND-DRIVERS-CODE-ASSESSMENT-2026-07-27.md
+++ b/local/docs/NETWORKING-AND-DRIVERS-CODE-ASSESSMENT-2026-07-27.md
@@ -1025,6 +1025,7 @@ incrementally; this is a rolling changelog.
 | **libredox API bug** | **Fd::ftruncate/futimens take &self, not self** | `submodule/libredox 5bb745e` → parent `cc37a2c08a` | `local/sources/libredox/src/lib.rs` |
 | **HIGH DEF-P0-11 (option collision)** | **relibc passes level + netstack SocketT takes (level, name)** | `submodule/relibc 06bd61d0` + `submodule/base 181eb63d` → parent `689b9a9e5a` | `local/sources/relibc/src/platform/redox/socket.rs` (setsockopt/getsockopt wire format) + `local/sources/base/netstack/src/scheme/{socket,tcp,udp}.rs` (SocketT trait + impls) |
 | **R002 (HIGH state-machine bug)** | **conntrack is_orig dead-variable fix** | `submodule/base 946d28d8` → parent `f381f9d40e` | `local/sources/base/netstack/src/filter/conntrack.rs` |
+| **Single source of truth** | **libredox O_CLOEXEC references syscall** | `submodule/libredox 65889db` → parent `914e0e6a2e` | `local/sources/libredox/src/lib.rs` |
 | **STALE TCP SendMsg TODO** | Removed (netstack does handle SocketCall::SendMsg at `local/sources/base/netstack/src/scheme/socket.rs:519-533`) | (same relibc commit) | `local/sources/relibc/src/platform/redox/socket.rs` (sendto) |
 | **F21 (dnsd wiring)** | **Wire redbear-dnsd into redbear-mini** | `6b105c7cee` | `config/redbear-mini.toml` ([packages] + [init] 11_dnsd.service) |
 | **ghost-recipe docs** | **netd/audiodevd/usbd WIP per AGENTS.md** | `6b105c7cee` | `local/recipes/system/{netd,audiodevd,usbd}/recipe.toml` |