diff --git a/conductor/tracks/architecture_boundary_hardening_20260302/plan.md b/conductor/tracks/architecture_boundary_hardening_20260302/plan.md
index 2ab24a2..7eea32d 100644
--- a/conductor/tracks/architecture_boundary_hardening_20260302/plan.md
+++ b/conductor/tracks/architecture_boundary_hardening_20260302/plan.md
@@ -15,8 +15,8 @@ Focus: Expose all native MCP tools in the config and GUI, and ensure mutating to
 
 - [x] Task 2.1: Update `manual_slop.toml` and `project_manager.py`'s `default_project()` to include all new tools (e.g., `set_file_slice`, `py_update_definition`, `py_set_signature`) under `[agent.tools]`. e4ccb06
 - [x] Task 2.2: Update `gui_2.py`'s settings/config panels to expose toggles for these new tools. 4b7338a
-- [~] Task 2.3: In `mcp_client.py`, define a `MUTATING_TOOLS` constant set.
-- [ ] Task 2.4: In `ai_client.py`'s provider loops (`_send_gemini`, `_send_gemini_cli`, `_send_anthropic`, `_send_deepseek`), update the tool execution logic: if `name in mcp_client.MUTATING_TOOLS`, it MUST trigger a GUI approval mechanism (like `pre_tool_callback`) before dispatching the tool. 
+- [x] Task 2.3: In `mcp_client.py`, define a `MUTATING_TOOLS` constant set. 1f92629
+- [~] Task 2.4: In `ai_client.py`'s provider loops (`_send_gemini`, `_send_gemini_cli`, `_send_anthropic`, `_send_deepseek`), update the tool execution logic: if `name in mcp_client.MUTATING_TOOLS`, it MUST trigger a GUI approval mechanism (like `pre_tool_callback`) before dispatching the tool.
 
 ## Phase 3: DAG Engine Cascading Blocks (Application Core)
 Focus: Prevent infinite deadlocks when Tier 3 workers fail repeatedly.