diff --git a/AGENTS.md b/AGENTS.md
index d0d2697..7f954cc 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -2228,7 +2228,7 @@ session with **no other memory of this project**. So:
   instead of showing the error boundary.
 - **Baselines** (verified 2026-10-29): `npm test` → **0 errors, 0 warnings**,
   **156 tests**, build ok. The gate also type-checks the CVM server
-  (`tsc -p cvm-server/tsconfig.json`). `package.json` version **1.7.48**.
+  (`tsc -p cvm-server/tsconfig.json`). `package.json` version **1.7.49**.
   - ✅ Lint is **clean**: `no-explicit-any` = 0 · `react-hooks/exhaustive-deps` = 0
     · `no-unused-vars` = 0 · `react-refresh` = 0. Non-component exports were
     **split into their own modules** (`contexts/language.ts`, `lib/sortOptions.ts`,
@@ -2733,6 +2733,11 @@ Rules:
       The seal half of a DM decrypt is cached when a two-step decrypt is cut
       short. APK sha256 `a74f21de…`, versionCode 10748. Web forced live at
       `3d905af`.
+    - **1.7.49 (2026-10-30):** Cordn setup is single-flight, so a double-tap on
+      “Set up” cannot launch overlapping coordinator/Amber flows. Amber users
+      see the two real setup steps (device key → join request); each coordinator
+      request is a separate approval. APK sha256 `9dee0c4d…`, versionCode 10749.
+      Web forced live at `7958ca5`.
 
 ### Relay archive (dataset backup)
 - **Transfer content between keys (`scripts/transfer-content.mjs`, 2026-10-04):**