diff --git a/docs/pfi/fleet-conventions.md b/docs/pfi/fleet-conventions.md
index 41a8a33..580a9a0 100644
--- a/docs/pfi/fleet-conventions.md
+++ b/docs/pfi/fleet-conventions.md
@@ -71,8 +71,19 @@ useradd --system --uid 8NN --user-group --shell /usr/sbin/nologin \
 (1000+) where `/etc/passwd` cannot distinguish them from people. That is the
 defect the convention fixes going forward.
 
-⚠ **A service account must not hold interactive root.** As of 2026-09-14
-`llmuser` is in the `sudo` group on ana-docker. Flagged, not yet resolved.
+⚠ **A service account must not hold interactive root.** Enforced 2026-09-14:
+`llmuser` was in `sudo`+`docker` on ana-docker and `sudo` on irv-ml1; both
+stripped. Nothing broke, and the reason is worth knowing — nearly every process
+attributed to `llmuser` by `pgrep -u` was a **container** process whose in-image
+UID happens to be 1001. A container's runtime UID has nothing to do with host
+group membership, so the groups were buying it nothing. The one genuine host
+workload (`lora-training-worker.service` on irv-ml1) sets `User=`/`Group=`
+explicitly via systemd, which does not consult the `sudo` group either.
+
+**Generalisation for the next audit:** `pgrep -u <user>` on a Docker host
+over-attributes badly. Check `/proc/<pid>/cgroup` for a `docker-*.scope` before
+concluding a host account is busy — otherwise a UID collision reads as an
+active service account and blocks a cleanup that carries no risk.
 
 ---
 
@@ -183,14 +194,16 @@ Anything already at `0600`/`0400` is deliberate. Leave it.
 
 | item | state |
 |---|---|
-| `llmuser` holds `sudo` on ana-docker | flagged 2026-09-14, unresolved |
 | `/mnt/smithy` NFS export is `0777` throughout | blocked on § 3 UID alignment |
 | Synapse appservice tokens sit in plaintext on ana-docker | flagged 2026-09-14; belongs in the vault |
 | Legacy service accounts in the human UID range | not renamed, by decision |
 
 ## Changelog
 
-- **2026-09-14** — ratified. Deleted the dormant `linus` account on ana-docker
+- **2026-09-14** — ratified. `vh` confirmed as the standard for new hosts with
+  **no retro-renames**. Stripped `sudo`+`docker` from `llmuser` (ana-docker) and
+  `sudo` (irv-ml1) — see § 1.3; all 63 containers across both hosts stayed
+  healthy and `lora-training-worker` stayed active. Deleted the dormant `linus` account on ana-docker
   (passwordless root, last used 2026-04-11, archived to
   `/root/account-archive/linus-20260914.tar.gz`). Standardised `infra-ops` home
   to `0700` on five hosts. Normalised corviduo-dev's docker tree, the operator