diff --git a/requirement/phase3.4-plan.md b/requirement/phase3.4-plan.md
index 8eb4159..aa8fef6 100644
--- a/requirement/phase3.4-plan.md
+++ b/requirement/phase3.4-plan.md
@@ -1,5 +1,12 @@
 # Phase 3.4 Implementation Plan: Self-Managed Authentication
 
+> **Progress snapshot (2026-04-24):**
+> - ✅ **Backend cutover complete** — commit `f860ab6`. All services, middleware, routes, WS auth, seed, env, deps done. Both apps (`app.public.js`, `app.internal.js`) build clean.
+> - ⚠ **Fazpass stubbed** — `otp.service.js` generates codes locally until real API docs arrive. Replace `fazpassSendStub` + `fazpassVerifyStub` at that time.
+> - ❌ **client_app / mitra_app / control_center rewrites** — not started. Until these land, the Flutter apps and control center will NOT work end-to-end against the new backend.
+> - ❌ **Apple Developer prereqs** still required before iOS E2E testing.
+> - ❌ **Consolidated `phase3.4-testing.md`** — not yet written. `phase3.3-testing.md` remains the canonical test list until then.
+
 ## Summary of Clarified Requirements
 
 | Topic | Decision |