@@ -26,4 +26,6 @@
 - Blocks: TASK-196, TASK-198, TASK-185
 **Related Requirements:** PRD-V3N-REQ-005, PRD-V3N-REQ-006, PRD-V3N-REQ-009, PRD-V3N-REQ-011, PRD-V3N-REQ-012, PRD-V3N-REQ-013, PRD-V3N-REQ-015, PRD-V3N-REQ-017, PRD-V3N-REQ-021, PRD-V3N-REQ-023, PRD-V3N-REQ-024, PRD-V3N-REQ-025, PRD-V3N-REQ-026, PRD-V3N-REQ-027, PRD-V3N-REQ-031, PRD-V3N-REQ-032, PRD-V3N-REQ-033, PRD-V3N-REQ-038.
 **Related Decisions:** DR-V3-001, DR-V3-003, DR-V3-004, DR-V3-005, DR-V3-006, DR-V3-008.
-**Status:** In Progress
+**Status:** Complete
+
+**Completion evidence:** [Implementation receipts](../../architecture/v3/TASK-195-implementation-evidence.md). Groundwork validation passed in one iteration with zero fixes and four approved nonblocking items persisted, session `85783280823cc035461552e47569369c`; all eight reviewers approve and 678 identity/hash checks have zero mismatches. Required local normal/ASan/UBSan/TSan suites, independent installed Python-h2/Node shared/static managed/external public matrices, package checks and 145 pinned h2spec cases passed. Immutable archives: `build/task195-evidence/implementation-8ddc2644` and `build/task195-evidence/validation-85783280823cc035461552e47569369c`, each with SHA256 manifests. Nonlocal platform execution remains assigned to CI and the v3 PR.
@@ -342,7 +342,7 @@ Nominally: **13 sequential tasks**, each S–XL. Most other tasks parallelize of
 | TASK-192 | [Implement owned v3 cookie helpers and parity witnesses](M14-v3-release-repairs/TASK-192.md) | M14 | Complete | TASK-191 |
 | TASK-193 | [Install public credentials and serve native TCP TLS](M14-v3-release-repairs/TASK-193.md) | M14 | Complete | TASK-192 |
 | TASK-194 | [Complete public TLS profiles, live rotation and ACME selection](M14-v3-release-repairs/TASK-194.md) | M14 | Complete | TASK-193 |
-| TASK-195 | [Route negotiated public HTTP/2 streams through native listeners](M14-v3-release-repairs/TASK-195.md) | M14 | In Progress | TASK-190, TASK-194 |
+| TASK-195 | [Route negotiated public HTTP/2 streams through native listeners](M14-v3-release-repairs/TASK-195.md) | M14 | Complete | TASK-190, TASK-194 |
 | TASK-196 | [Add production UDP QUIC ownership and public HTTP/3 routing](M14-v3-release-repairs/TASK-196.md) | M14 | Not Started | TASK-191, TASK-193, TASK-195 |
 | TASK-197 | [Complete public HTTP/3 lifecycle, policy and WebSocket parity](M14-v3-release-repairs/TASK-197.md) | M14 | Not Started | TASK-194, TASK-196 |
 | TASK-198 | [Provide native public throughput and latency benchmarks](M14-v3-release-repairs/TASK-198.md) | M14 | Not Started | TASK-195, TASK-197 |
 
@@ -0,0 +1,25 @@
+# Unworked Review Issues
+
+**Run:** 2026-10-10 19:12:10
+**Task:** TASK-195
+**Total:** 4 (0 critical, 2 major, 2 minor)
+
+## Major
+
+1. [ ] **housekeeper** | `README.md:32` | documentation-stale
+   The capability table says 'TLS / HTTP/2 / HTTP/3 listeners' return typed not_supported, although TASK-195 now enables public certificate and initial-mTLS HTTP/2 listeners. The same stale claim appears in docs/native-tls-build.md at lines 62 and 251 and examples/README.md at lines 42-43, contradicting the new H2 guidance later in those docs.
+   *Recommendation:* Update the capability table and remaining later-task statements to distinguish supported certificate/mTLS HTTP/2 from unsupported HTTP/3 and TLS-off HTTP/2.
+
+2. [ ] **test-quality-reviewer** | `test/unit/http2_dispatch_test.cpp:24` | missing-test
+   The overflow test claims to verify capture destruction outside the lock, but every queued lambda captures only references. Re-entry occurs from the terminal callback, which exercises a different lifetime boundary. Destroying abandoned queued handlers under the scheduler mutex would still pass this test, leaving the TASK-195 design invariant about destruction of user captures unprotected against a deadlocking regression.
+   *Recommendation:* Add a focused overflow regression whose queued handler owns the last reference to a destructor probe that re-enters the dispatcher; verify destruction occurs once and completes. Keep terminal-callback re-entry as its own assertion, and use a bounded test timeout for the deadlock discriminator.
+
+## Minor
+
+3. [ ] **code-simplifier** | `scripts/lib/v3_public_http2_inventory.py:90` | code-structure
+   The nested conditional expression combines client selection with dictionary union, making the required scenario inventory harder to scan than the surrounding validation logic.
+   *Recommendation:* Use an explicit client-to-inventory mapping (or a short if/elif) and select from it here; this keeps the exact fail-closed inventory unchanged while making the three client cases visible.
+
+4. [ ] **housekeeper** | `NEWS:1` | changelog-missing
+   The current v3.0.0 release notes describe the native engine but do not mention that public HTTP/2 over TLS ALPN is now available.
+   *Recommendation:* Add a concise v3.0.0 NEWS entry for public certificate/mTLS HTTP/2 availability and its TLS-off limitation.