1 files changed, 4 insertions, 4 deletions
diff --git a/PLAN.md b/PLAN.md
index 2406158..d43344b 100644
--- a/PLAN.md
+++ b/PLAN.md
@@ -74,10 +74,10 @@ Build a TollGate firmware for two ESP32 devices, following the [TollGate protoco
 | 21 | Wrong mint | Token from unaccepted mint | kind=21023 mint error | PASS |
 | 22 | Session expiry | Wait for allotment | Internet blocked | PASS |
 | 23 | Session renewal | Second payment | Allotment extended | PASS |
-| 24 | Portal payment form | Playwright paste token | Checkmark shown | TODO |
+| 24 | Portal payment form | Playwright paste token | Checkmark shown | PASS |
-| 25 | Two clients pay independently | Two POSTs | Both authenticated | TODO |
+| 25 | Two clients pay independently | Two POSTs | Both authenticated | Phase 3 |
-| 26 | Client isolation | Only payer gets internet | Non-payer blocked | TODO |
+| 26 | Client isolation | Only payer gets internet | Non-payer blocked | Phase 3 |
-| 27 | Full e2e: portal→pay→browse | Playwright | Complete flow | TODO |
+| 27 | Full e2e: portal→pay→browse | Playwright | Complete flow | Phase 3 |
 **Captive Portal Fix:** Added DoT reject server on port 853 (TCP RST forces DNS-over-TLS fallback to plain DNS), DNS hijack returns NXDOMAIN for all non-A query types, explicit 302 redirect handlers for all captive detection URIs. Needs verification with actual GrapheneOS phone.

diff --git a/PLAN.md b/PLAN.md index 2406158..d43344b 100644 --- a/PLAN.md +++ b/PLAN.md
@@ -74,10 +74,10 @@ Build a TollGate firmware for two ESP32 devices, following the [TollGate protoco
74	\| 21 \| Wrong mint \| Token from unaccepted mint \| kind=21023 mint error \| PASS \|	74	\| 21 \| Wrong mint \| Token from unaccepted mint \| kind=21023 mint error \| PASS \|
75	\| 22 \| Session expiry \| Wait for allotment \| Internet blocked \| PASS \|	75	\| 22 \| Session expiry \| Wait for allotment \| Internet blocked \| PASS \|
76	\| 23 \| Session renewal \| Second payment \| Allotment extended \| PASS \|	76	\| 23 \| Session renewal \| Second payment \| Allotment extended \| PASS \|
77	\| 24 \| Portal payment form \| Playwright paste token \| Checkmark shown \| TODO \|	77	\| 24 \| Portal payment form \| Playwright paste token \| Checkmark shown \| PASS \|
78	\| 25 \| Two clients pay independently \| Two POSTs \| Both authenticated \| TODO \|	78	\| 25 \| Two clients pay independently \| Two POSTs \| Both authenticated \| Phase 3 \|
79	\| 26 \| Client isolation \| Only payer gets internet \| Non-payer blocked \| TODO \|	79	\| 26 \| Client isolation \| Only payer gets internet \| Non-payer blocked \| Phase 3 \|
80	\| 27 \| Full e2e: portal→pay→browse \| Playwright \| Complete flow \| TODO \|	80	\| 27 \| Full e2e: portal→pay→browse \| Playwright \| Complete flow \| Phase 3 \|
81		81
82	Captive Portal Fix: Added DoT reject server on port 853 (TCP RST forces DNS-over-TLS fallback to plain DNS), DNS hijack returns NXDOMAIN for all non-A query types, explicit 302 redirect handlers for all captive detection URIs. Needs verification with actual GrapheneOS phone.	82	Captive Portal Fix: Added DoT reject server on port 853 (TCP RST forces DNS-over-TLS fallback to plain DNS), DNS hijack returns NXDOMAIN for all non-A query types, explicit 302 redirect handlers for all captive detection URIs. Needs verification with actual GrapheneOS phone.
83		83