diff --git a/docs/workspace-panel-todo.md b/docs/workspace-panel-todo.md
index 7780e60a..cd2bf127 100644
--- a/docs/workspace-panel-todo.md
+++ b/docs/workspace-panel-todo.md
@@ -396,8 +396,11 @@ the whole table:
       about a panel being _missing_ and no allow-list can see that.
       Still open from this item: deriving the allow-lists from the AppRegistry (they are still
       hand-written literals, so a type still allow-listed but deleted from the registry passes and
-      reaches the unrecoverable empty box at `PanelSlot.tsx:311-317`), and the nine locked screens
-      that still pass no `appTypes` at all — now a one-line fix each rather than fifty.
+      reaches the unrecoverable empty box at `PanelSlot.tsx:311-317`). The unguarded screens are done
+      (`653201f`): Dashboards, Desktop, Terminal and Files now pass one, checked against what is
+      persisted rather than against their defaults; Browser and Email deliberately do not, because
+      their panels resolve through `components`, which `PanelSlot` keys on the panel id, so their
+      `appType` is never read. Home and the two dashboard screens are not `locked` and stay open.
       The original text follows.
 
       **One `makeLayoutNormalizer(allowed, fallback)` applied inside `WorkspaceView`.**