diff --git a/prd-status-tracker.md b/prd-status-tracker.md
index e000827..6811676 100644
--- a/prd-status-tracker.md
+++ b/prd-status-tracker.md
@@ -5,9 +5,9 @@
 | Chunk | Status | Commit | Notes |
 |-------|--------|--------|-------|
 | Chunk 1 — Purpose, Scope, Success Criteria | ✅ Complete | `73e42cc` | Merged into `homelab-services-stack-prd.md` |
-| Chunk 2 — Constraints, Service Catalog, Network Architecture | ✅ Complete | `a3fc718` | Reconciled with live fleet: AdGuard(1), Portainer(1), Beszel Agent pending, DNS status table |
-| Chunk 3 — Data & Persistence, Security Model | 🔄 In Progress | — | Ready to proceed |
-| Chunk 4 — Deployment Phases, Open Questions, Appendix | ⏳ Pending | — | Blocked on Chunk 3 |
+| Chunk 2 — Constraints, Service Catalog, Network Architecture | ✅ Complete | `a3fc718` | Reconciled with live fleet |
+| Chunk 3 — Data & Persistence, Security Model | ✅ Complete | `b7cc09c` | Pi-hole fully removed, AdGuard canonical. ACL policy corrected. Split files + master PRD in sync. |
+| Chunk 4 — Deployment Phases, Open Questions, Appendix | 🔄 In Progress | — | Ready to proceed |
 
 ## Operational Documentation