diff --git a/PRODUCT.md b/PRODUCT.md
index eadbdc63af..d4d8d4d287 100644
--- a/PRODUCT.md
+++ b/PRODUCT.md
@@ -238,14 +238,14 @@ user-facing surfaces use the rest of the product vocabulary above.
 ## Open questions
 
 - Template-key-only settle (system sender, no agent wake) is shipped;
-  generic `connections/pending` still wakes the asking agent. A leftover
-  agent 401 after GitHub already succeeded is still a first-minute bug
-  — see IMPLEMENTATION.md; do not document that it cannot happen.
-- Connected/settle honesty (no stale Connect after success; settle never
-  posting as the signed-in user; no agent 401 after GitHub already
-  succeeded) stays **target** until CL-6737 and CL-6738 land — see
-  IMPLEMENTATION.md open questions; do not document those guarantees as
-  shipped.
+  generic `connections/pending` still wakes the asking agent.
+- Settle attribution via a synthetic system sender is shipped (CL-6741);
+  `connection.connected` is never posted as the signed-in user. See
+  [docs/connect-cards.md](docs/connect-cards.md).
+- A leftover agent 401 after GitHub already succeeded, and a stale
+  Connect after success, remain first-minute bugs — see
+  [docs/connect-cards.md](docs/connect-cards.md); do not document those
+  as shipped.
 - Live Canva MCP OAuth (sign-in, DCR, and post-OAuth probe against
   Canva's own servers) is not verified; do not document a proven live
   Canva handshake.