diff --git a/docs/CODEX_HANDOFF.md b/docs/CODEX_HANDOFF.md
index 4cdfa4323..8c7f53f62 100644
--- a/docs/CODEX_HANDOFF.md
+++ b/docs/CODEX_HANDOFF.md
@@ -54,7 +54,9 @@
 
 `T0-3.0 R3 - COMPLETE / HOSTED AND REAL-DEVICE VALIDATED`
 
-`T0-3.0 R4 - LOCALLY IMPLEMENTED / HOSTED ACCEPTANCE PENDING`
+`T0-3.0 R4 - COMPLETE / HOSTED VALIDATED (PR #98; upstream run 35579104934)`
+
+`T0-3.0 Mosaic identity establishment - COMPLETE`
 
 `R3 Android TV banner identity - COMPLETE / HOSTED AND REAL-DEVICE VALIDATED (PR #95)`
 
@@ -83,9 +85,8 @@ retained its tested tree; protected-main run `35312694402` authenticated and reu
 independently built, signed, and published Development `v1.0.68` / `downstream-build-68` /
 `develop`. This proves `constbogdan/Wholphin`. R2 then renamed the live repository to
 `constbogdan/Mosaic`; PR #89 and protected-main run `35324869750` supplied the new-name hosted proof
-described below. The frozen order is now R2 canonical product/distribution implementation and
-hosted proof, R3 real-device lifecycle proof, then R4 removal of old repository authentication; do
-not collapse the sequence.
+described below. R2 canonical product/distribution implementation and hosted proof, R3 real-device
+lifecycle proof, and R4 removal of old repository authentication have now completed in that order.
 
 R2's external repository rename is **VERIFIED**. `constbogdan/Wholphin` became the canonical
 `constbogdan/Mosaic` while repository ID `1351255476`, `main` and Git history, public fork relation
@@ -109,11 +110,30 @@ head `d01f09f547d39ce768e3cbb071d3d711c1026389` ran CI `35324631949`, attempt 1,
 fallback. Development classified the complete range `docs-only / low`, `releaseRequired=false`,
 reported `No build required`, and skipped Release Build, Sign and Publish.
 
-R1 is **COMPLETE / BOTH-NAME HOSTED VALIDATED** as historical transition evidence. R4 has removed
-the exact two-name bridge locally and awaits hosted acceptance. R2's repository rename is **COMPLETE
-/ VERIFIED**. The R2 canonical Mosaic identity migration
-is **HOSTED VALIDATED**; R3 is **COMPLETE / HOSTED AND REAL-DEVICE VALIDATED**. Historical old-name evidence remains correct, and the old-name authorization
-is no longer current authorization.
+R1 is **COMPLETE / BOTH-NAME HOSTED VALIDATED** as historical transition evidence. R4 removed the
+exact two-name bridge and is **COMPLETE / HOSTED VALIDATED**. R2's repository rename is **COMPLETE /
+VERIFIED**. The R2 canonical Mosaic identity migration is **HOSTED VALIDATED**; R3 is **COMPLETE /
+HOSTED AND REAL-DEVICE VALIDATED**. Historical old-name evidence remains correct, while current
+downstream authorization accepts only exact `constbogdan/Mosaic`.
+
+PR #98 on `fix/t0-3-r4-mosaic-only-authentication`, head
+`491d05e437f6d88ffdff41e380440970de266c8e`, completed authoritative `ANDROID_FULL` in PR run
+`35577374647`: changed-range pre-commit, the complete offline tooling suite, and Full
+`defaultDebug` validation passed under repository `constbogdan/Mosaic`. Classification remained
+`tooling-only / high`, and reusable evidence retained `wholphin-pr-policy-v1-*`. Native merge
+`cc1113f8054880de20a62ffd124bf98912e90036` then entered protected main. Run `35578337513`
+authenticated PR #98's exact tested tree and reused `ANDROID_FULL`, skipping repeated formatting,
+offline, Android setup, and Gradle Full work. Development eligibility independently reported `No
+build required`; Build, Sign, and Publish remained skipped.
+
+Manual [Upstream check run 35579104934](https://github.com/constbogdan/Mosaic/actions/runs/35579104934),
+attempt 1 (`Upstream check · Manual` #62), executed the same merge commit under the Mosaic-only
+identity. Observe and Publish succeeded, reauthenticated blocker PR #58 and its exact head, retained
+the newer observation, and reported `Waiting on PR #58` without creating a duplicate branch or PR.
+The hosted job record explicitly marks `Mint repository-scoped publication token` as skipped and
+shows an empty `SYNC_PUBLISH_TOKEN`; no App token was minted for the authenticated waiting state.
+T0-3.0 Mosaic identity establishment is therefore **COMPLETE**. The next active phase is **T0-3
+Documentation, Wiki & Roadmap consolidation**; Baseline T0 remains in progress.
 
 PR #91 passed authoritative `ANDROID_FULL`, protected-main exact-tree reuse, Build, and Sign, and
 produced valid immutable `downstream-build-72`. Rolling publication then exposed two bounded
diff --git a/docs/T0_3_R2_MOSAIC_IDENTITY.md b/docs/T0_3_R2_MOSAIC_IDENTITY.md
index 7287024bf..ee7940f67 100644
--- a/docs/T0_3_R2_MOSAIC_IDENTITY.md
+++ b/docs/T0_3_R2_MOSAIC_IDENTITY.md
@@ -1,7 +1,7 @@
 # T0-3.0 R2 — canonical Mosaic identity
 
 Status: **R2 canonical Mosaic identity — HOSTED VALIDATED. R3 — COMPLETE / HOSTED AND REAL-DEVICE
-VALIDATED. R4 — LOCALLY IMPLEMENTED / HOSTED ACCEPTANCE PENDING.**
+VALIDATED. R4 — COMPLETE / HOSTED VALIDATED. T0-3.0 Mosaic identity establishment — COMPLETE.**
 
 ## Current identity contract
 
@@ -258,9 +258,11 @@ Release `392754451` published `Mosaic-v1.0.77.apk` plus `Mosaic-v1.0.77.json`. T
 immutable candidate share SHA-256
 `207a9d2affb5925ca93aa9276d599709b9daf86fb505140a08ff935767d32d84`.
 
-R3 is therefore **COMPLETE / HOSTED AND REAL-DEVICE VALIDATED**. R4 removal of the old repository
-name from the R1 bridge is locally implemented and awaits hosted acceptance; dedicated
-documentation/wiki consolidation follows R4.
+R3 is therefore **COMPLETE / HOSTED AND REAL-DEVICE VALIDATED**. R4 removed the old repository name
+from current authorization and is **COMPLETE / HOSTED VALIDATED** through PR #98, protected-main
+exact-tree reuse, and manual Upstream check run `35579104934`. Current downstream authentication is
+Mosaic-only; historical old-name evidence remains intentionally unchanged. T0-3.0 Mosaic identity
+establishment is complete, and dedicated documentation/wiki/roadmap consolidation is next.
 
 ## Visual follow-up
 
diff --git a/docs/Wholphin_ROADMAP.md b/docs/Wholphin_ROADMAP.md
index 7898af694..85e8d267f 100644
--- a/docs/Wholphin_ROADMAP.md
+++ b/docs/Wholphin_ROADMAP.md
@@ -24,7 +24,9 @@ HOSTED VALIDATED (PR #85); T0-2 is COMPLETE. T0-3.0 R1 is COMPLETE / BOTH-NAME H
 (old-name PR #87; new-name PR #89). R2's external repository rename is COMPLETE / VERIFIED; the
 [canonical Mosaic identity migration](T0_3_R2_MOSAIC_IDENTITY.md) is HOSTED VALIDATED. Its
 Development publisher correction is COMPLETE / HOSTED RECOVERY VALIDATED. R3 is COMPLETE / HOSTED
-AND REAL-DEVICE VALIDATED. R4 is LOCALLY IMPLEMENTED / HOSTED ACCEPTANCE PENDING.
+AND REAL-DEVICE VALIDATED. R4 is COMPLETE / HOSTED VALIDATED (PR #98; upstream run 35579104934).
+T0-3.0 Mosaic identity establishment is COMPLETE. The next active phase is T0-3 Documentation,
+Wiki & Roadmap consolidation.
 The external contribution lifecycle is KEEP /
 DOCUMENTED.** Baseline T0 is an
 engineering baseline, not an application release. The ordered program is:
@@ -374,7 +376,7 @@ default; the surviving mechanisms each protect a reviewed consumer or authority
 Status: **R1 — COMPLETE / BOTH-NAME HOSTED VALIDATED. R2 repository rename — COMPLETE / VERIFIED.
 R2 canonical Mosaic identity migration — HOSTED VALIDATED. Development publisher correction —
 COMPLETE / HOSTED RECOVERY VALIDATED. R3 — COMPLETE / HOSTED AND REAL-DEVICE VALIDATED. R4 —
-LOCALLY IMPLEMENTED / HOSTED ACCEPTANCE PENDING.**
+COMPLETE / HOSTED VALIDATED. T0-3.0 MOSAIC IDENTITY ESTABLISHMENT — COMPLETE.**
 
 T0-3 begins by establishing the permanent downstream product identity before the broader
 documentation, wiki, and roadmap consolidation. This record preserves the accepted decisions and
@@ -651,9 +653,9 @@ Development eligibility independently classified the complete unpublished range
 with `releaseRequired=false` and `skipped_non_apk` (`No build required`); Release Build, Sign and
 Publish did not run. The `wholphin-pr-policy-v1-*` protocol was neither renamed nor versioned.
 
-R1 is therefore **COMPLETE / BOTH-NAME HOSTED VALIDATED**. Its exact two-name bridge remains
-installed intentionally until R4; do not remove `constbogdan/Wholphin` authorization during the
-next canonical product migration.
+R1 is therefore **COMPLETE / BOTH-NAME HOSTED VALIDATED** as historical transition evidence. Its
+temporary exact two-name bridge was retained through R3 and removed by hosted-validated R4; current
+downstream authorization accepts only exact `constbogdan/Mosaic`.
 
 ##### R2 — canonical Mosaic product and distribution identity
 
@@ -709,7 +711,8 @@ Mosaic launcher/banner identity. The operator then installed v1.0.76 over the ex
 without uninstalling; login/session, preferences/local state, normal launch/use, and the Mosaic TV
 identity survived the in-place update. PR #96 and Stable Promotion run `35571701304` hosted-validated
 the final presentation contract and exact-byte promotion of `downstream-build-77` to
-`mosaic-v1.0.77`. R4 is the next T0-3.0 point before dedicated documentation/wiki consolidation.
+`mosaic-v1.0.77`. R4 subsequently closed the repository-authentication transition before dedicated
+documentation/wiki consolidation.
 
 ##### R4 — retire the bridge and close T0-3.0
 
@@ -721,13 +724,19 @@ With R3 complete:
 - preserve historical old repository values and evidence unchanged;
 - record **T0-3.0 — COMPLETE / LIVE VALIDATED**.
 
-R4 is **LOCALLY IMPLEMENTED / HOSTED ACCEPTANCE PENDING**. Current runtime and workflow
+R4 is **COMPLETE / HOSTED VALIDATED**. Current runtime and workflow
 authentication accepts only exact `constbogdan/Mosaic`; the retired `constbogdan/Wholphin` identity,
 case variants, lookalikes, foreign owners, and malformed identities fail closed before credentials
 or mutation. Historical old-name evidence and upstream `damontecres/Wholphin` remain unchanged.
-T0-3.0 is not closed until the Mosaic-only hosted lifecycle is accepted.
+PR #98 head `491d05e437f6d88ffdff41e380440970de266c8e` passed authoritative `ANDROID_FULL`
+in run `35577374647`. Native merge `cc1113f8054880de20a62ffd124bf98912e90036` reached protected
+main, where run `35578337513` authenticated and reused the exact PR evidence; Development reported
+`No build required`. Manual Upstream check run `35579104934` then authenticated Mosaic-only Observe
+and Publish, retained the newer observation, and finished `Waiting on PR #58` without a duplicate
+candidate or App-token mint. T0-3.0 Mosaic identity establishment is **COMPLETE**.
 
-The permanent T0-3 documentation/knowledge consolidation begins only after R4.
+The next active phase is **T0-3 Documentation, Wiki & Roadmap consolidation**. Baseline T0 remains
+in progress.
 
 #### Explicit exclusions
 
@@ -770,8 +779,8 @@ immediate explanation in Actions, PRs and Releases.
 T0-1 Cleanup & Operator Experience        COMPLETE
 T0-2 Engineering / Process Audit          COMPLETE
 T0-2 blocking findings                    RESOLVED / ACCEPTED
-T0-3.0 Mosaic identity establishment      PENDING — R1 NEXT
-T0-3 Documentation / Wiki / Roadmap       PENDING
+T0-3.0 Mosaic identity establishment      COMPLETE / HOSTED VALIDATED
+T0-3 Documentation / Wiki / Roadmap       NEXT
 I06                                       COMPLETE / LIVE VALIDATED
 I07                                       COMPLETE / LIVE VALIDATED
 No known issue blocks Baseline T0