diff --git a/api/admin/generate-first-action-receipt.js b/api/admin/generate-first-action-receipt.js
index de9aac6..a4f09ed 100644
--- a/api/admin/generate-first-action-receipt.js
+++ b/api/admin/generate-first-action-receipt.js
@@ -11,7 +11,7 @@ function paidOrApproved(claim) {
 function preflight(claim) {
   if (!paidOrApproved(claim)) return 'FIRST_ACTION_REQUIRES_PAID_CLAIM';
   if (!claim.tenant_signer_ens || !claim.tenant_signer_kid) return 'TENANT_SIGNER_ENS_REQUIRED';
-  if (claim.tenant_signer_record_status !== 'records_verified') return 'TENANT_SIGNER_RECORDS_NOT_VERIFIED';
+  if (claim.tenant_signer_record_status !== 'records_verified' && claim.tenant_signer_record_status !== 'verified') return 'TENANT_SIGNER_RECORDS_NOT_VERIFIED';
   if (!claim.genesis_receipt_id) return 'GENESIS_RECEIPT_REQUIRED';
   if ('tenant_proof_status' in claim && claim.tenant_proof_status && claim.tenant_proof_status !== 'verified') return 'TENANT_PROOF_NOT_VERIFIED';
   return null;
diff --git a/api/admin/run-activation-pipeline.js b/api/admin/run-activation-pipeline.js
index a3baf89..9c3b094 100644
--- a/api/admin/run-activation-pipeline.js
+++ b/api/admin/run-activation-pipeline.js
@@ -4,6 +4,7 @@ const db = require('../../lib/db');
 const { requireAdminAuth } = require('./_auth');
 const pinAgentCards = require('./pin-agent-cards');
 const generateGenesisReceipt = require('./generate-genesis-receipt');
+const generateFirstActionReceipt = require('./generate-first-action-receipt');
 
 function makeInternalRes() {
   return {
@@ -26,6 +27,17 @@ function paymentStep(claim) {
   return claim.status === 'paid' || claim.status === 'cards_pinned' || claim.payment_status === 'paid' || claim.paid_at ? 'already_paid' : 'payment_required';
 }
 
+function recordsVerified(claim) {
+  return claim.tenant_signer_record_status === 'records_verified' || claim.tenant_signer_record_status === 'verified';
+}
+
+function canAttemptFirstAction(claim) {
+  if (!claim.genesis_receipt_id) return false;
+  if (!recordsVerified(claim)) return false;
+  if ('tenant_proof_status' in claim && claim.tenant_proof_status && claim.tenant_proof_status !== 'verified') return false;
+  return true;
+}
+
 module.exports = async function handler(req, res) {
   res.setHeader('Content-Type', 'application/json; charset=utf-8');
   res.setHeader('Cache-Control', 'no-store');
@@ -52,6 +64,8 @@ module.exports = async function handler(req, res) {
       agent_cards: 'not_started',
       genesis_receipt: claim.genesis_receipt_id ? 'already_generated' : 'not_started',
       tenant_action_proof: claim.tenant_proof_status || 'not_submitted',
+      first_action_receipt: claim.first_action_receipt_status || 'not_generated',
+      errors: {},
     };
 
     if (steps.payment !== 'already_paid') {
@@ -71,6 +85,7 @@ module.exports = async function handler(req, res) {
         steps.agent_cards = pinRes.body && pinRes.body.status === 'ALREADY_PINNED' ? 'cards_pinned' : 'cards_pinned';
       } else {
         steps.agent_cards = pinRes.body && pinRes.body.status ? pinRes.body.status : 'pinning_not_completed';
+        steps.errors.agent_cards = steps.agent_cards;
       }
     }
 
@@ -86,6 +101,23 @@ module.exports = async function handler(req, res) {
         steps.genesis_receipt = 'already_generated';
       } else {
         steps.genesis_receipt = genesisRes.body && genesisRes.body.status ? genesisRes.body.status : 'not_generated';
+        steps.errors.genesis_receipt = steps.genesis_receipt;
+      }
+    }
+
+    claimResult = await db.query('select * from claim_requests where claim_id = $1 limit 1', [claimId]);
+    claim = claimResult.rows[0] || claim;
+    if (claim.first_action_receipt_status === 'verified') {
+      steps.first_action_receipt = 'verified';
+    } else if (claim.first_action_receipt_status === 'challenge_ready') {
+      steps.first_action_receipt = 'challenge_ready';
+    } else if (canAttemptFirstAction(claim)) {
+      const firstActionRes = await runHandler(generateFirstActionReceipt, { method: 'POST', headers: { 'x-admin-api-key': req.headers['x-admin-api-key'] || process.env.ADMIN_API_KEY }, body: { claimId } });
+      if (firstActionRes.statusCode >= 200 && firstActionRes.statusCode < 300) {
+        steps.first_action_receipt = firstActionRes.body && firstActionRes.body.status ? firstActionRes.body.status : 'challenge_ready';
+      } else {
+        steps.first_action_receipt = firstActionRes.body && firstActionRes.body.status ? firstActionRes.body.status : 'not_generated';
+        steps.errors.first_action_receipt = steps.first_action_receipt;
       }
     }
 
diff --git a/api/admin/verify-managed-ens-publication.js b/api/admin/verify-managed-ens-publication.js
index 2b7271a..ac44ae8 100644
--- a/api/admin/verify-managed-ens-publication.js
+++ b/api/admin/verify-managed-ens-publication.js
@@ -3,6 +3,25 @@
 const db = require('../../lib/db');
 const { requireAdminAuth } = require('./_auth');
 const { verifyManagedEnsPublication } = require('../../lib/claims/managed-ens-publication');
+const runActivationPipeline = require('./run-activation-pipeline');
+
+function makeInternalRes() {
+  return {
+    statusCode: 200,
+    body: null,
+    headers: {},
+    setHeader(name, value) { this.headers[String(name).toLowerCase()] = value; },
+    status(code) { this.statusCode = code; return this; },
+    json(payload) { this.body = payload; return this; },
+  };
+}
+
+async function advanceActivation(req, claimId) {
+  const pipelineRes = makeInternalRes();
+  await runActivationPipeline({ method: 'POST', headers: { 'x-admin-api-key': req.headers['x-admin-api-key'] || process.env.ADMIN_API_KEY }, body: { claimId } }, pipelineRes);
+  if (pipelineRes.statusCode >= 200 && pipelineRes.statusCode < 300 && pipelineRes.body && pipelineRes.body.ok) return pipelineRes.body.steps || {};
+  return { errors: { activation_pipeline: pipelineRes.body && pipelineRes.body.status ? pipelineRes.body.status : 'ACTIVATION_PIPELINE_FAILED' } };
+}
 
 module.exports = async function handler(req, res) {
   res.setHeader('Content-Type', 'application/json; charset=utf-8');
@@ -19,12 +38,14 @@ module.exports = async function handler(req, res) {
     if (verification.ok) {
       await db.query(
         `update claim_requests
-         set managed_ens_publication_status = 'verified', tenant_signer_record_status = 'records_verified',
+         set managed_ens_publication_status = 'verified', tenant_signer_record_status = 'verified',
              tenant_signer_records_verified_at = now(), managed_ens_verified_at = now(),
              managed_ens_publication_error = null, tenant_signer_verification_error = null, updated_at = now()
          where claim_id = $1`,
         [claimId]
       );
+      const advanced = await advanceActivation(req, claimId);
+      return res.status(200).json({ ok: true, claim_id: claimId, managed_ens_publication_status: 'verified', tenant_signer_record_status: 'verified', verification, advanced });
     } else {
       await db.query(
         `update claim_requests
diff --git a/api/claims/status.js b/api/claims/status.js
index d9414fd..a399f58 100644
--- a/api/claims/status.js
+++ b/api/claims/status.js
@@ -44,6 +44,7 @@ module.exports = async function handler(req, res) {
     } catch (_error) {
       cards = [];
     }
+    const recordsVerified = claim.tenant_signer_record_status === 'records_verified' || claim.tenant_signer_record_status === 'verified';
     const paymentConfirmed = claim.status === 'paid' || claim.status === 'cards_pinned' || claim.status === 'active' || claim.payment_status === 'paid' || Boolean(claim.paid_at);
     const pipeline = {
       tenant_signing_identity: claim.tenant_signer_ens ? 'generated' : 'missing',
@@ -55,7 +56,7 @@ module.exports = async function handler(req, res) {
       genesis_receipt: claim.genesis_receipt_id ? 'generated' : 'not_generated',
       tenant_action_proof: claim.tenant_proof_status || 'not_submitted',
       first_action_receipt: claim.first_action_receipt_status || 'not_generated',
-      agent_live: paymentConfirmed && claim.tenant_signer_record_status === 'records_verified' && cardsStatus(cards) === 'cards_pinned' && claim.genesis_receipt_id && claim.tenant_proof_status === 'verified' && (claim.first_action_receipt_status === 'verified' || typeof claim.first_action_receipt_status === 'undefined') ? 'live' : 'not_live',
+      agent_live: paymentConfirmed && recordsVerified && cardsStatus(cards) === 'cards_pinned' && claim.genesis_receipt_id && claim.tenant_proof_status === 'verified' && (claim.first_action_receipt_status === 'verified' || typeof claim.first_action_receipt_status === 'undefined') ? 'live' : 'not_live',
     };
     return res.status(200).json({ ok: true, read_only: true, claim: { ...stripClaimSecrets(claim), cardsStatus: cardsStatus(cards), managed_ens_publication: { status: claim.managed_ens_publication_status || 'not_started', signer_ens: claim.tenant_signer_ens || null, parent_namespace: claim.managed_ens_parent_namespace || null, record_names: Object.keys(claim.managed_ens_required_txt_records || claim.tenant_signer_txt_records || {}), helper_copy: 'The operator must publish the generated TXT records to ENS before signer verification can pass.', verified_at: claim.managed_ens_verified_at || null, error: claim.managed_ens_publication_error || null } }, pipeline, cards });
   } catch (_error) {
diff --git a/public/admin/claims.html b/public/admin/claims.html
index 189472b..a3f05b5 100644
--- a/public/admin/claims.html
+++ b/public/admin/claims.html
@@ -51,7 +51,7 @@ <h1>CommandLayer Claims Admin</h1><p class="muted">Internal operator dashboard f
 </div>
 <script>
 (() => {
-const s={claims:[],selected:'',detail:null,error:null,checkoutLoading:false,checkoutUrl:null,genesisLoading:false,genesisStatus:'',managedEnsPublication:null};
+const s={claims:[],selected:'',detail:null,error:null,checkoutLoading:false,checkoutUrl:null,genesisLoading:false,genesisStatus:'',managedEnsPublication:null,activationAdvanced:null};
 const apiKey=document.getElementById('apiKey'); apiKey.value=sessionStorage.getItem('cl_admin_api_key')||localStorage.getItem('cl_admin_api_key')||'';
 const headers=()=>{const key=apiKey.value.trim();return {Authorization:`Bearer ${key}`,'x-admin-api-key':key,'Content-Type':'application/json'};};
 const short=(v,n=10)=>v?`${v.slice(0,n)}…`:''; const dt=(v)=>v?new Date(v).toLocaleString():'-';
@@ -60,11 +60,11 @@ <h1>CommandLayer Claims Admin</h1><p class="muted">Internal operator dashboard f
 function renderClaims(){const b=document.getElementById('claimsBody');b.innerHTML='';document.getElementById('claimsCount').textContent=`(${s.claims.length} loaded)`;for(const c of s.claims){const row=document.createElement('button');row.type='button';row.className=`claim-item ${s.selected===c.claimId?'selected':''}`;row.innerHTML=`<div class='claim-head'><span class='mono'>${short(c.claimId,14)}</span>${badge(c.status)}</div><div class='claim-meta'><span>${c.tenant||'-'}</span><span>${c.packId||'-'} · ${c.agentCount||0} agents</span></div><div class='claim-meta'><span>${dt(c.createdAt)}</span></div>`;row.onclick=()=>loadDetail(c.claimId);b.appendChild(row);}}
 async function loadClaims(){status('Loading claims...');const r=await fetch('/api/admin/claims',{headers:{Authorization:headers().Authorization,'x-admin-api-key':headers()['x-admin-api-key']}});const d=await r.json();if(!r.ok||d?.ok===false){status(`${r.status} ${d.status||d.error||'error'}`);return;}s.claims=d.claims||[];renderClaims();status(`Loaded ${s.claims.length} claims.`);}
 async function loadDetail(id){s.selected=id;s.detail=null;s.error=null;renderClaims();renderDetail('Loading claim detail...');const endpoint=`/api/admin/claim?claimId=${encodeURIComponent(id)}`;console.debug('[claims-admin] selected claimId:',id);console.debug('[claims-admin] detail endpoint:',endpoint);const r=await fetch(endpoint,{headers:{Authorization:headers().Authorization,'x-admin-api-key':headers()['x-admin-api-key']}});console.debug('[claims-admin] detail HTTP status:',r.status);const d=await r.json().catch(()=>({}));console.debug('[claims-admin] detail response status/error:',d?.status||null,d?.error||null);if(!r.ok||d?.ok===false||!d?.claim){s.error=`Claim detail failed: ${r.status} — ${d?.error||d?.status||'Unknown error'}`;renderDetail();return;}s.detail=d;renderDetail();}
-async function action(action,p={}){const r=await fetch('/api/admin/claim-action',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected,action,actor:'admin',...p})});const d=await r.json();if(!r.ok||!d.ok){s.error=`${d.status}: ${d.error}`;renderDetail();return;}s.error=null;await loadClaims();await loadDetail(s.selected);} 
-async function publish(){const r=await fetch('/api/admin/publish-agent-cards',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json();if(!r.ok||!d.ok){s.error=`${d.status}: ${d.error}`;renderDetail();return;}s.error=null;await loadClaims();await loadDetail(s.selected);} 
+async function action(action,p={}){const r=await fetch('/api/admin/claim-action',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected,action,actor:'admin',...p})});const d=await r.json();if(!r.ok||!d.ok){s.error=`${d.status}: ${d.error}`;renderDetail();return;}s.error=null;await loadClaims();await loadDetail(s.selected);}
+async function publish(){const r=await fetch('/api/admin/publish-agent-cards',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json();if(!r.ok||!d.ok){s.error=`${d.status}: ${d.error}`;renderDetail();return;}s.error=null;await loadClaims();await loadDetail(s.selected);}
 
 function mapGenesisStatus(statusCode,httpStatus){if(statusCode==='GENESIS_REQUIRES_PINNED_CARDS')return 'GENESIS_REQUIRES_PINNED_CARDS';if(statusCode==='SIGNING_UNAVAILABLE')return 'SIGNING_UNAVAILABLE';if(statusCode==='GENESIS_RECEIPT_ALREADY_EXISTS'||statusCode==='GENESIS_ALREADY_EXISTS')return 'GENESIS_ALREADY_EXISTS';return `Request failed: ${httpStatus}`;}
-async function generateGenesisReceipt(force=false){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;s.genesisLoading=true;s.genesisStatus='Generating genesis...';renderDetail();const endpoint='/api/admin/generate-genesis-receipt';try{const r=await fetch(endpoint,{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected,force})});console.debug('[claims-admin] genesis endpoint:',endpoint);console.debug('[claims-admin] genesis HTTP status:',r.status);const d=await r.json().catch(()=>({}));console.debug('[claims-admin] genesis response status:',d?.status||null);if(!r.ok||!d.ok){s.genesisStatus=mapGenesisStatus(d?.status,r.status);s.error=s.genesisStatus;renderDetail();return;}s.genesisStatus='Genesis receipt generated';await loadClaims();await loadDetail(s.selected);}catch(e){s.genesisStatus='Request failed: 500';s.error=s.genesisStatus;renderDetail();}finally{s.genesisLoading=false;renderDetail();}} 
+async function generateGenesisReceipt(force=false){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;s.genesisLoading=true;s.genesisStatus='Generating genesis...';renderDetail();const endpoint='/api/admin/generate-genesis-receipt';try{const r=await fetch(endpoint,{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected,force})});console.debug('[claims-admin] genesis endpoint:',endpoint);console.debug('[claims-admin] genesis HTTP status:',r.status);const d=await r.json().catch(()=>({}));console.debug('[claims-admin] genesis response status:',d?.status||null);if(!r.ok||!d.ok){s.genesisStatus=mapGenesisStatus(d?.status,r.status);s.error=s.genesisStatus;renderDetail();return;}s.genesisStatus='Genesis receipt generated';await loadClaims();await loadDetail(s.selected);}catch(e){s.genesisStatus='Request failed: 500';s.error=s.genesisStatus;renderDetail();}finally{s.genesisLoading=false;renderDetail();}}
 async function createCheckoutSession(claimId,forceNew=false){if(!claimId){s.error='400 — claimId is required';renderDetail();return;}s.error=null;s.checkoutUrl=null;s.checkoutLoading=true;renderDetail();try{const r=await fetch('/api/admin/create-checkout-session',{method:'POST',headers:headers(),body:JSON.stringify({claimId,forceNew})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){const detail=d?.debug?.message?`\nDetails: ${d.debug.message}`:'';s.error=`Checkout failed:\n${d.status||r.status} — ${d.error||'Request failed'}${detail}`;return;}s.checkoutUrl=d.checkoutUrl||d.url||null;await loadClaims();await loadDetail(claimId);}catch(e){s.error=`500 — ${e?.message||'Request failed'}`;}finally{s.checkoutLoading=false;renderDetail();}}
 function checkoutUrlFromClaim(claim){return s.checkoutUrl || claim?.stripe_checkout_url || claim?.payment_checkout_url || null;}
 function openCheckout(claim){const url=checkoutUrlFromClaim(claim);if(url)window.open(url,'_blank');}
@@ -76,11 +76,12 @@ <h1>CommandLayer Claims Admin</h1><p class="muted">Internal operator dashboard f
 async function generateFirstActionReceipt(){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;try{const r=await fetch('/api/admin/generate-first-action-receipt',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){s.error=d?.status||'FIRST_ACTION_RECEIPT_FAILED';renderDetail();return;}await loadClaims();await loadDetail(s.selected);}catch(e){s.error='FIRST_ACTION_RECEIPT_FAILED';renderDetail();}}
 
 
-async function prepareManagedEnsPublication(){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;const r=await fetch('/api/admin/prepare-managed-ens-publication',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){s.error=d?.status||'MANAGED_ENS_PUBLICATION_PREPARE_FAILED';renderDetail();return;}s.managedEnsPublication=d.publication;await loadDetail(s.selected);} 
-async function verifyManagedEnsPublication(){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;const r=await fetch('/api/admin/verify-managed-ens-publication',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){s.error=d?.status||'MANAGED_ENS_PUBLICATION_VERIFY_FAILED';renderDetail();return;}s.managedEnsPublication=null;await loadDetail(s.selected);} 
+async function prepareManagedEnsPublication(){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;const r=await fetch('/api/admin/prepare-managed-ens-publication',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){s.error=d?.status||'MANAGED_ENS_PUBLICATION_PREPARE_FAILED';renderDetail();return;}s.managedEnsPublication=d.publication;await loadDetail(s.selected);}
+async function verifyManagedEnsPublication(){if(!s.selected){s.error='Request failed: 400';renderDetail();return;}s.error=null;const r=await fetch('/api/admin/verify-managed-ens-publication',{method:'POST',headers:headers(),body:JSON.stringify({claimId:s.selected})});const d=await r.json().catch(()=>({}));if(!r.ok||!d.ok){s.error=d?.status||'MANAGED_ENS_PUBLICATION_VERIFY_FAILED';renderDetail();return;}s.managedEnsPublication=null;s.activationAdvanced=d.advanced||null;await loadClaims();await loadDetail(s.selected);}
+function advancementPanel(){const a=s.activationAdvanced;if(!a)return '';const err=a.errors||{};const rows=[['Managed ENS','verified'],['Agent card pinning',a.agent_cards||'not_started'],['Genesis receipt',a.genesis_receipt||'not_started'],['First Action Receipt',a.first_action_receipt||'not_generated']];return `<div class='panel'><strong>Managed ENS verified — activation advanced</strong>${rows.map(([k,v])=>`<div>${k}: <strong>${v}</strong></div>`).join('')}${Object.keys(err).length?`<div class='error-panel'>Advancement errors: ${Object.entries(err).map(([k,v])=>`${k}: ${v}`).join(' · ')}</div>`:''}</div>`;}
 function txtRecordBlocks(claim){const records=(s.managedEnsPublication&&s.managedEnsPublication.required_txt_records)||claim.managed_ens_required_txt_records||claim.tenant_signer_txt_records||{};return Object.entries(records).map(([k,v])=>`<div class='panel' style='margin:8px 0'><div><strong>${k}</strong> <button class='btn btn-muted copy-url' data-url='${String(v).replaceAll("'",'&#39;')}'>Copy value</button></div><pre class='mono' style='white-space:pre-wrap;overflow-wrap:anywhere;'>${v}</pre></div>`).join('')||'<p class="muted">Prepare TXT records to display required values.</p>';}
 
-function renderDetail(loadingMsg=''){const el=document.getElementById('detailPanel');if(loadingMsg){el.innerHTML=`<p class="muted">${loadingMsg}</p>`;return;}if(!s.detail){el.innerHTML=`<p class="muted">${s.error||'Select a claim to review.'}</p>`;return;}const payload=s.detail||{};const claim=payload.claim||{};const agents=payload.agents||[];const genesis=claim.genesis_receipt_json||null;const events=payload.events||[];const transitions=payload.transitions||[];const cards=payload.cards||[];const urls=cards.map(c=>c.card_url).filter(Boolean);const missing=claim.status==='cards_published'&&agents.some(a=>!a.card_url);const firstUrl=urls[0];el.innerHTML=`${s.error?`<div class='error-panel'>${s.error}</div>`:''}<h3>Claim <span class='mono'>${short(claim.claim_id,16)}</span> <button id='copyClaim' class='btn btn-muted'>Copy</button> ${badge(claim.status)}</h3><p class='muted'>Tenant: ${claim.tenant||'-'} · Wallet: <span class='mono'>${claim.authenticated_address||'-'}</span> · Status: ${claim.status||'-'} · Payment: ${claim.payment_status||'-'} · Agents: ${agents.length} · Created: ${dt(claim.created_at)}</p><h4>Pipeline</h4>${pipeline(claim.status)}<h4>Signer identity</h4><div class='panel'><div>Activation mode: <strong>${claim.activation_mode||'-'}</strong></div><div>Signer ENS: <span class='mono'>${claim.tenant_signer_ens||'-'}</span></div><div>ENS records: <strong>${claim.tenant_signer_record_status||'records_pending'}</strong> · Network: ${claim.tenant_signer_records_network||'ethereum-mainnet'}</div><div>Managed ENS publication: <strong>${claim.managed_ens_publication_status||'-'}</strong></div><div>Publication error: <span class='mono'>${claim.managed_ens_publication_error||'-'}</span></div><div>Desired parent namespace: <span class='mono'>${claim.managed_ens_parent_namespace||'-'}</span></div><div>Parent-control/resolver authority audited: <strong>${claim.managed_ens_parent_authority_audited?'yes':'no'}</strong></div><div>Tenant proof: <strong>${claim.tenant_proof_status||'not_submitted'}</strong> · signer <span class='mono'>${claim.tenant_proof_signer||'-'}</span></div><details open><summary>Required managed ENS TXT records</summary>${txtRecordBlocks(claim)}</details><details><summary>Four public TXT records</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(claim.tenant_signer_txt_records||{},null,2)}</pre></details><p class='muted'>Network required: Ethereum mainnet. Managed ENS publication is operator-ready only; no onchain TXT writes are executed here.</p></div><h4>Next action</h4><div class='row'><input id='reasonInput' placeholder='Reason'><input id='notesInput' placeholder='Notes'></div><div class='row' id='actions'></div><h4>Agents</h4><div class='table-scroll'><table><thead><tr><th>ENS</th><th>Capability</th><th>Parent</th><th>Card</th><th>Actions</th></tr></thead><tbody>${agents.map(a=>`<tr><td class='mono ens-wrap'>${a.ens||'-'}</td><td>${a.capability||'-'}</td><td>${a.canonical_parent||'-'}</td><td>${a.card_status||'-'}</td><td>${a.card_url?`<a href='${a.card_url}' target='_blank'>Open</a> <button class='btn btn-muted copy-url' data-url='${a.card_url}'>Copy</button>`:'-'}</td></tr>`).join('')}</tbody></table></div>${claim.status==='payment_pending'?`<h4>Payment pending</h4><p class='muted'>Checkout has been created. Open it to complete payment.</p><p class='mono'>${claim.stripe_checkout_session_id||'-'}</p>`:''}${claim.status==='paid'?`<h4>Payment received</h4><p class='muted'>Next: ERC-8004 registration</p>`:''}${claim.status==='cards_published'?`<h4>Agent cards published</h4><p class='muted'>Founding Activation: $20 first year for 10 Trust Verification namespaces.</p><p class='muted'>${urls.length} cards${missing?' · Missing card URLs detected':''}</p>${s.checkoutUrl?`<div class='panel'><strong>Checkout created</strong><div class='row'><a class='btn btn-secondary' href='${s.checkoutUrl}' target='_blank' rel='noopener'>Open checkout</a><button id='copyCheckoutUrl' type='button' class='btn btn-secondary' data-url='${s.checkoutUrl}'>Copy checkout URL</button></div><div class='mono' style='overflow-wrap:anywhere;'>${s.checkoutUrl}</div></div>`:''}<div class='row'><button id='copyUrls' type='button' class='btn btn-secondary'>Copy all URLs</button>${firstUrl?`<button id='openFirst' type='button' class='btn btn-secondary'>Open first card</button>`:''}</div><div>${urls.map(u=>`<div class='card-url-row'><span class='mono truncate' title='${u}'>${u.split('/').pop()?.replace(/\.json$/,'')||u}</span><a href='${u}' target='_blank'>Open</a>${copyBtn(u)}</div>`).join('')}</div>${missing?`<p class='error-panel'>Some cards are missing URLs. Use Repair / Publish cards.</p>`:''}`:''}<h4>Events</h4>${events.map(e=>`<div class='panel' style='margin-bottom:8px'><strong>${e.event_type}</strong><div style='overflow-wrap:anywhere;'>${e.message||''}</div><div class='muted'>${dt(e.created_at)}</div><details><summary>metadata</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(e.event_json||{},null,2)}</pre></details></div>`).join('')||'<p class="muted">No events.</p>'}<h4>Genesis Receipt</h4><div class='panel'><div>Status: <strong>${genesis?'generated':'not generated'}</strong></div><div class='mono'>Receipt ID: ${claim.genesis_receipt_id||'-'}</div><div class='mono'>Receipt Hash: ${claim.genesis_receipt_hash||'-'}</div><div class='mono'>Chain Root: ${claim.receipt_chain_root||'-'}</div><div class='muted'>Generated at: ${dt(claim.genesis_generated_at)}</div>${s.genesisStatus?`<div class='muted'>${s.genesisStatus}</div>`:''}${genesis?`<button id='copyGenesis' class='btn btn-secondary' type='button'>Copy JSON</button>`:''}</div><h4>First Action Receipt</h4><div class='panel'><div>Status: <strong>${claim.first_action_receipt_status||'not_generated'}</strong></div><div class='mono'>Receipt ID: ${claim.first_action_receipt_id||'-'}</div><div class='mono'>Receipt Hash: ${claim.first_action_receipt_hash||'-'}</div><div class='muted'>${claim.first_action_receipt_error||'This proves the claimed agent can produce a scoped execution receipt. It does not prove payment settlement.'}</div><button id='generateFirstAction' class='btn btn-secondary' type='button'>Generate challenge</button></div><h4>Transitions</h4>${transitions.map(t=>`<div class='panel' style='margin-bottom:8px'>${t.from_status||'-'} → ${t.to_status||'-'} · ${t.action||'-'} · ${t.actor||'-'}<div class='muted'>${dt(t.created_at)} ${t.reason?`· ${t.reason}`:''}</div></div>`).join('')||'<p class="muted">No transitions.</p>'}<details><summary>Show raw JSON</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(s.detail,null,2)}</pre></details>`;
+function renderDetail(loadingMsg=''){const el=document.getElementById('detailPanel');if(loadingMsg){el.innerHTML=`<p class="muted">${loadingMsg}</p>`;return;}if(!s.detail){el.innerHTML=`<p class="muted">${s.error||'Select a claim to review.'}</p>`;return;}const payload=s.detail||{};const claim=payload.claim||{};const agents=payload.agents||[];const genesis=claim.genesis_receipt_json||null;const events=payload.events||[];const transitions=payload.transitions||[];const cards=payload.cards||[];const urls=cards.map(c=>c.card_url).filter(Boolean);const missing=claim.status==='cards_published'&&agents.some(a=>!a.card_url);const firstUrl=urls[0];el.innerHTML=`${s.error?`<div class='error-panel'>${s.error}</div>`:''}<h3>Claim <span class='mono'>${short(claim.claim_id,16)}</span> <button id='copyClaim' class='btn btn-muted'>Copy</button> ${badge(claim.status)}</h3><p class='muted'>Tenant: ${claim.tenant||'-'} · Wallet: <span class='mono'>${claim.authenticated_address||'-'}</span> · Status: ${claim.status||'-'} · Payment: ${claim.payment_status||'-'} · Agents: ${agents.length} · Created: ${dt(claim.created_at)}</p><h4>Pipeline</h4>${pipeline(claim.status)}${advancementPanel()}<h4>Signer identity</h4><div class='panel'><div>Activation mode: <strong>${claim.activation_mode||'-'}</strong></div><div>Signer ENS: <span class='mono'>${claim.tenant_signer_ens||'-'}</span></div><div>ENS records: <strong>${claim.tenant_signer_record_status||'records_pending'}</strong> · Network: ${claim.tenant_signer_records_network||'ethereum-mainnet'}</div><div>Managed ENS publication: <strong>${claim.managed_ens_publication_status||'-'}</strong></div><div>Publication error: <span class='mono'>${claim.managed_ens_publication_error||'-'}</span></div><div>Desired parent namespace: <span class='mono'>${claim.managed_ens_parent_namespace||'-'}</span></div><div>Parent-control/resolver authority audited: <strong>${claim.managed_ens_parent_authority_audited?'yes':'no'}</strong></div><div>Tenant proof: <strong>${claim.tenant_proof_status||'not_submitted'}</strong> · signer <span class='mono'>${claim.tenant_proof_signer||'-'}</span></div><details open><summary>Required managed ENS TXT records</summary>${txtRecordBlocks(claim)}</details><details><summary>Four public TXT records</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(claim.tenant_signer_txt_records||{},null,2)}</pre></details><p class='muted'>Network required: Ethereum mainnet. Managed ENS publication is operator-ready only; no onchain TXT writes are executed here.</p></div><h4>Next action</h4><div class='row'><input id='reasonInput' placeholder='Reason'><input id='notesInput' placeholder='Notes'></div><div class='row' id='actions'></div><h4>Agents</h4><div class='table-scroll'><table><thead><tr><th>ENS</th><th>Capability</th><th>Parent</th><th>Card</th><th>Actions</th></tr></thead><tbody>${agents.map(a=>`<tr><td class='mono ens-wrap'>${a.ens||'-'}</td><td>${a.capability||'-'}</td><td>${a.canonical_parent||'-'}</td><td>${a.card_status||'-'}</td><td>${a.card_url?`<a href='${a.card_url}' target='_blank'>Open</a> <button class='btn btn-muted copy-url' data-url='${a.card_url}'>Copy</button>`:'-'}</td></tr>`).join('')}</tbody></table></div>${claim.status==='payment_pending'?`<h4>Payment pending</h4><p class='muted'>Checkout has been created. Open it to complete payment.</p><p class='mono'>${claim.stripe_checkout_session_id||'-'}</p>`:''}${claim.status==='paid'?`<h4>Payment received</h4><p class='muted'>Next: ERC-8004 registration</p>`:''}${claim.status==='cards_published'?`<h4>Agent cards published</h4><p class='muted'>Founding Activation: $20 first year for 10 Trust Verification namespaces.</p><p class='muted'>${urls.length} cards${missing?' · Missing card URLs detected':''}</p>${s.checkoutUrl?`<div class='panel'><strong>Checkout created</strong><div class='row'><a class='btn btn-secondary' href='${s.checkoutUrl}' target='_blank' rel='noopener'>Open checkout</a><button id='copyCheckoutUrl' type='button' class='btn btn-secondary' data-url='${s.checkoutUrl}'>Copy checkout URL</button></div><div class='mono' style='overflow-wrap:anywhere;'>${s.checkoutUrl}</div></div>`:''}<div class='row'><button id='copyUrls' type='button' class='btn btn-secondary'>Copy all URLs</button>${firstUrl?`<button id='openFirst' type='button' class='btn btn-secondary'>Open first card</button>`:''}</div><div>${urls.map(u=>`<div class='card-url-row'><span class='mono truncate' title='${u}'>${u.split('/').pop()?.replace(/\.json$/,'')||u}</span><a href='${u}' target='_blank'>Open</a>${copyBtn(u)}</div>`).join('')}</div>${missing?`<p class='error-panel'>Some cards are missing URLs. Use Repair / Publish cards.</p>`:''}`:''}<h4>Events</h4>${events.map(e=>`<div class='panel' style='margin-bottom:8px'><strong>${e.event_type}</strong><div style='overflow-wrap:anywhere;'>${e.message||''}</div><div class='muted'>${dt(e.created_at)}</div><details><summary>metadata</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(e.event_json||{},null,2)}</pre></details></div>`).join('')||'<p class="muted">No events.</p>'}<h4>Genesis Receipt</h4><div class='panel'><div>Status: <strong>${genesis?'generated':'not generated'}</strong></div><div class='mono'>Receipt ID: ${claim.genesis_receipt_id||'-'}</div><div class='mono'>Receipt Hash: ${claim.genesis_receipt_hash||'-'}</div><div class='mono'>Chain Root: ${claim.receipt_chain_root||'-'}</div><div class='muted'>Generated at: ${dt(claim.genesis_generated_at)}</div>${s.genesisStatus?`<div class='muted'>${s.genesisStatus}</div>`:''}${genesis?`<button id='copyGenesis' class='btn btn-secondary' type='button'>Copy JSON</button>`:''}</div><h4>First Action Receipt</h4><div class='panel'><div>Status: <strong>${claim.first_action_receipt_status||'not_generated'}</strong></div><div class='mono'>Receipt ID: ${claim.first_action_receipt_id||'-'}</div><div class='mono'>Receipt Hash: ${claim.first_action_receipt_hash||'-'}</div><div class='muted'>${claim.first_action_receipt_error||'This proves the claimed agent can produce a scoped execution receipt. It does not prove payment settlement.'}</div><button id='generateFirstAction' class='btn btn-secondary' type='button'>Generate challenge</button></div><h4>Transitions</h4>${transitions.map(t=>`<div class='panel' style='margin-bottom:8px'>${t.from_status||'-'} → ${t.to_status||'-'} · ${t.action||'-'} · ${t.actor||'-'}<div class='muted'>${dt(t.created_at)} ${t.reason?`· ${t.reason}`:''}</div></div>`).join('')||'<p class="muted">No transitions.</p>'}<details><summary>Show raw JSON</summary><pre style='white-space:pre-wrap;overflow-wrap:anywhere;'>${JSON.stringify(s.detail,null,2)}</pre></details>`;
 const a=document.getElementById('actions');const mk=(t,c,cls='btn',opts={})=>{const b=document.createElement('button');b.type='button';b.textContent=t;b.className=cls;b.disabled=Boolean(opts.disabled);if(opts.id)b.id=opts.id;b.onclick=c;a.appendChild(b);};
 if(claim.status==='created'){mk('Approve',()=>action('approve',{notes:document.getElementById('notesInput').value}),'btn btn-primary');mk('Reject',()=>action('reject',{reason:document.getElementById('reasonInput').value}),'btn btn-secondary');mk('Mark failed',()=>action('mark_failed',{reason:document.getElementById('reasonInput').value}),'btn btn-danger');}
 if(claim.status==='approved'){mk('Publish agent cards',()=>publish(),'btn btn-primary');mk('Mark failed',()=>action('mark_failed',{reason:document.getElementById('reasonInput').value}),'btn btn-danger');mk('Add note',()=>action('add_note',{notes:document.getElementById('notesInput').value,reason:document.getElementById('reasonInput').value}),'btn');}
diff --git a/tests/managed-ens-publication.test.js b/tests/managed-ens-publication.test.js
index 7772788..b9038c6 100644
--- a/tests/managed-ens-publication.test.js
+++ b/tests/managed-ens-publication.test.js
@@ -32,7 +32,7 @@ test('successful verification updates managed ENS and signer statuses', async()=
   db.query=async(q,params)=>{ if(q.includes('select * from claim_requests')) return {rows:[claim()]}; updates.push({q,params}); return {rows:[],rowCount:1}; };
   const resolver=async(_ens,key)=>({'cl.sig.pub':'ed25519:pub','cl.sig.kid':'kid1','cl.sig.canonical':'json.sorted_keys.v1','cl.receipt.signer':'acme.attestagent.eth'}[key]);
   const res=makeRes(); await verify({method:'POST',headers:{'x-admin-api-key':'admin'},body:{claimId:'c1'},verifyOptions:{textResolver:resolver}},res);
-  assert.equal(res.statusCode,200); assert.equal(res.body.verification.ok,true); assert.ok(updates[0].q.includes("tenant_signer_record_status = 'records_verified'"));
+  assert.equal(res.statusCode,200); assert.equal(res.body.verification.ok,true); assert.equal(res.body.managed_ens_publication_status,'verified'); assert.equal(res.body.tenant_signer_record_status,'verified'); assert.ok(updates[0].q.includes("tenant_signer_record_status = 'verified'")); assert.equal(res.body.advanced.payment,'payment_required');
 });
 
 test('failed verification stores error and does not mark signer verified', async()=>{
@@ -40,7 +40,7 @@ test('failed verification stores error and does not mark signer verified', async
   db.query=async(q,params)=>{ if(q.includes('select * from claim_requests')) return {rows:[claim()]}; updates.push({q,params}); return {rows:[],rowCount:1}; };
   const resolver=async(_ens,key)=> key === 'cl.sig.pub' ? 'wrong' : ({'cl.sig.kid':'kid1','cl.sig.canonical':'json.sorted_keys.v1','cl.receipt.signer':'acme.attestagent.eth'}[key]);
   const res=makeRes(); await verify({method:'POST',headers:{'x-admin-api-key':'admin'},body:{claimId:'c1'},verifyOptions:{textResolver:resolver}},res);
-  assert.equal(res.statusCode,200); assert.equal(res.body.verification.ok,false); assert.ok(!updates[0].q.includes("tenant_signer_record_status = 'records_verified'")); assert.equal(updates[0].params[2],'required_txt_record_mismatch');
+  assert.equal(res.statusCode,200); assert.equal(res.body.verification.ok,false); assert.ok(!updates[0].q.includes("tenant_signer_record_status = 'verified'")); assert.equal(updates[0].params[2],'required_txt_record_mismatch');
 });
 
 test('public claim status includes managed ENS publication status', async()=>{
@@ -48,3 +48,20 @@ test('public claim status includes managed ENS publication status', async()=>{
   const res=makeRes(); await status({method:'GET',query:{claimId:'c1'},headers:{'x-claim-access-token':token}},res);
   assert.equal(res.statusCode,200); assert.equal(res.body.pipeline.managed_ens_publication,'ready_to_publish'); assert.equal(res.body.claim.managed_ens_publication.helper_copy.includes('operator must publish'),true); assert.deepEqual(res.body.claim.managed_ens_publication.record_names,['cl.sig.kid']);
 });
+
+test('successful managed ENS verification returns advancement and preserves verified first action receipt', async()=>{
+  process.env.ADMIN_API_KEY='admin'; const updates=[];
+  const paidClaim = claim({status:'cards_pinned',payment_status:'paid',paid_at:'2026-01-01T00:00:00Z',tenant_signer_record_status:'verified',tenant_proof_status:'verified',genesis_receipt_id:'gen1',first_action_receipt_status:'verified',first_action_receipt_id:'fa1'});
+  db.query=async(q,params)=>{
+    if(q.includes('select * from claim_requests')) return {rows:[paidClaim]};
+    if(q.includes('select ens, card_cid')) return {rows:[{ens:'a.eth',card_cid:'cid',card_ipfs_uri:'ipfs://cid',card_sha256:'h'}]};
+    updates.push({q,params}); return {rows:[],rowCount:1};
+  };
+  const resolver=async(_ens,key)=>({'cl.sig.pub':'ed25519:pub','cl.sig.kid':'kid1','cl.sig.canonical':'json.sorted_keys.v1','cl.receipt.signer':'acme.attestagent.eth'}[key]);
+  const res=makeRes(); await verify({method:'POST',headers:{'x-admin-api-key':'admin'},body:{claimId:'c1'},verifyOptions:{textResolver:resolver}},res);
+  assert.equal(res.statusCode,200);
+  assert.equal(res.body.advanced.agent_cards,'cards_pinned');
+  assert.equal(res.body.advanced.genesis_receipt,'already_generated');
+  assert.equal(res.body.advanced.first_action_receipt,'verified');
+  assert.equal(updates.some(u=>u.q.includes('first_action_receipt_json')),false);
+});