diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md
index 572b5e3..a479984 100644
--- a/docs/ROADMAP.md
+++ b/docs/ROADMAP.md
@@ -62,6 +62,11 @@ Written 2026-10-01 from the original 2023 code, the decePubClient UI, a federati
   - direct conversations as Mastodon keeps them (2026-10-05): paged by their newest message, `unread` when someone
     else wrote last, `read` that sticks, and `DELETE` taking one off the list until a newer message; the list reads its
     members and newest posts in a few queries, not several per conversation.
+  - wave 1 (2026-10-05): PeerTube, Pixelfed, WordPress, Friendica, Mobilizon and Gancio in the pasture with scenarios;
+    Hollo, Iceshrimp.NET, Pleroma, Pixelfed and Friendica in the town. What they showed and was fixed: RFC 9421
+    signatures verified; forwarded activities taken as their origin vouches; an id a sender reuses is no copy; a follow
+    sent again under a new id (Lemmy); a group's event its organiser edits; NodeInfo read as Mobilizon serves it.
+    Funkwhale is left of wave 1.
 - [ ] P7 Threads, communities, moderation, the social graph
 - [ ] P8 Signatures, discovery, the long tail
 - [x] P9 Reading at volume (owner decision 2026-10-04, back from "Cut"): lists, server-side filters, scheduled posts,
@@ -624,8 +629,9 @@ it, raw where it doesn't.
   - the outbound shape Lemmy requires;
   - communities we host announce to the author's own instance too;
   - Flags from a `Service`-typed reporter actor.
-- **GoToSocial interaction policies:** stored and shown; send `ReplyRequest`/`LikeRequest` where approval is
-  needed; handle `Accept{result}`.
+- **GoToSocial interaction policies** (**done 2026-10-05**, `InteractionApprovals`): stored and shown as
+  `interaction_policy`; `ReplyRequest`/`LikeRequest`/`AnnounceRequest` where approval is needed; `Accept{result}`
+  verified and carried; replies a policy does not let in kept only with an authorization.
 - **Accounts and follows:**
   - inbound `Move` with Mastodon's checks;
   - re-run WebFinger on a rename;