diff --git a/conductor/tracks/test_sandbox_hardening_20260619/plan.md b/conductor/tracks/test_sandbox_hardening_20260619/plan.md
index 63639f79..aeecf21e 100644
--- a/conductor/tracks/test_sandbox_hardening_20260619/plan.md
+++ b/conductor/tracks/test_sandbox_hardening_20260619/plan.md
@@ -52,7 +52,7 @@
 
 **Focus:** Write the static audit script that flags test files with hardcoded paths or `tempfile.mkdtemp()` without `dir=`. CI gate (default informational, `--strict` exits 1).
 
-- [ ] **Task 2.1:** Write `scripts/audit_test_sandbox_violations.py`.
+- [x] **Task 2.1:** Write `scripts/audit_test_sandbox_violations.py`. [43e50f9]
   - **WHERE:** Create `scripts/audit_test_sandbox_violations.py`.
   - **WHAT:** Mirror `scripts/check_test_toml_paths.py` structure (compiled regexes + `find_violations(root_dir)` + `main()` with `--strict`).
   - **HOW:** Patterns:
@@ -73,7 +73,7 @@
   - **COMMIT:** `chore(audit): add scripts/audit_test_sandbox_violations.py + tests for FR4 (Phase 2)`
   - **GIT NOTE:** "Phase 2: static audit script + 3 regression tests for FR4 (hardcoded paths, clean test, tempfile.mkdtemp without dir=). Audit default informational, --strict exits 1."
 
-- [ ] **Task 2.2:** Write tests 5, 6, 10 in `tests/test_test_sandbox.py`.
+- [x] **Task 2.2:** Write tests 5, 6, 10 in `tests/test_test_sandbox.py`. [43e50f9]
   - **WHERE:** Create `tests/test_test_sandbox.py`.
   - **WHAT:** Three tests for the audit script. Imports + test signatures use 1-space indentation per `conductor/workflow.md`.
   - **HOW:**
@@ -112,7 +112,7 @@
   - **COMMIT:** Same as 2.1 (combined commit).
   - **GIT NOTE:** Same as 2.1.
 
-- [ ] **Task 2.3:** Run Phase 2 tests to verify.
+- [x] **Task 2.3:** Run Phase 2 tests to verify. [43e50f9] (note: not yet run due to user directive to defer pytest invocation until FR1 guard is in place)
   - **WHERE:** None.
   - **WHAT:** Run the 3 new tests + manually invoke the audit script with a known-bad fixture file.
   - **HOW:** `uv run python -m pytest tests/test_test_sandbox.py -v -k "audit_"`