diff --git a/docs/pq-handshake.md b/docs/pq-handshake.md
index 3bd55ad2..68846c0c 100644
--- a/docs/pq-handshake.md
+++ b/docs/pq-handshake.md
@@ -454,9 +454,12 @@ in every scenario above, and within three at least 99.99%.
 
 ## Open items
 
-- Publish DefinedNet/noise, or upstream the hybrid patterns, and drop the `replace` in `go.mod`.
-  The classical-only responder `e` is on the local clone's `drop-responder-ekem-key` branch
+- Publish DefinedNet/noise and drop the `replace` in `go.mod`, once Nate says the fork is ready to
+  ship. The classical-only responder `e` is on the local clone's `drop-responder-ekem-key` branch
   (b4a892b), not yet in DefinedNet/noise.
 - Cryptographic review of the hybrid composition and of the v3 certificate signatures.
-- A tunnel that came up classical between two v3 holders (say, the hybrid attempt was dropped)
-  stays classical until it rehandshakes for another reason.
+- Field test of hybrid handshakes on real hosts, as was done for phase 1.
+
+Accepted as is: a tunnel that came up classical between two v3 holders (say, the hybrid attempt
+was dropped) stays classical until it rehandshakes for another reason. `require`, `sticky` and a
+CA pool without v2 forms cover deployments that need more. PKCS#11 keys do not support v3.