diff --git a/.kiro/specs/eliminate-frontend-makefile/tasks.md b/.kiro/specs/eliminate-frontend-makefile/tasks.md
index 7f05315b..a94fac42 100644
--- a/.kiro/specs/eliminate-frontend-makefile/tasks.md
+++ b/.kiro/specs/eliminate-frontend-makefile/tasks.md
@@ -1,6 +1,6 @@
 # Implementation Plan
 
-- [ ] 1. Core: CGO-backed backend test coverage via Meson
+- [x] 1. Core: CGO-backed backend test coverage via Meson
 - [x] 1.1 (P) Add a Meson test target for the apiserver CGO-backed backend suite, reusing the existing CGO flag derivation
   - Resolve the `@CURRENT_SOURCE_DIR@`/`@BUILD_ROOT@` placeholder tokens already present in `apiserver_cgo_deps`'s computed CGO flags at Meson-configure time (they are otherwise only resolved by `tools/go_build`'s own runtime sed machinery, which this new target does not go through)
   - Register the target with Meson's test runner (`suite: 'apiserver'`), scoped to the apiserver source directory, depending on `libxce` having already been built
@@ -21,7 +21,7 @@
   - _Requirements: 2.1, 2.2, 2.3_
   - _Boundary: xce-build.sh_
 
-- [ ] 3. Integration: eliminate every remaining live reference to the Makefile
+- [x] 3. Integration: eliminate every remaining live reference to the Makefile
 - [x] 3.1 (P) Fix run-resource-verify.sh's apiserver-binary discovery
   - Change `APISERVER_BIN`'s default from the fixed `/tmp/apiserver` path to the same `$BUILD_DIR/<component>/<binary>`-relative convention its sibling binaries (`BINARY`, `SCHED_BIN`, `XT`) already use, and update its failure message to name `/xce-build apiserver` instead of the Makefile target
   - Observable: with a binary present only in the Meson build dir (no `/tmp/apiserver`), the script locates and uses it; with neither present, the failure message names `/xce-build apiserver`, not `make build-server`
@@ -60,7 +60,7 @@
   - _Boundary: tests/regression/run.sh (verification only, no file changes)_
   - _Depends: 1.1, 2_
 
-- [ ] 3.6 Run the live-reference sweep across the whole repository and confirm zero hits outside the named exclusion classes
+- [x] 3.6 Run the live-reference sweep across the whole repository and confirm zero hits outside the named exclusion classes
   - Grep the full repository for `make (build-server|build-cli|test|test-backend|test-integration|test-all)` and `/tmp/apiserver`/`/tmp/xce_static`; classify every hit as either fixed by 3.1-3.4 or falling into one of design.md's named exclusion classes (`.kiro/specs/**` historical spec documents, `**/vendor/**` third-party files, dated historical records, `roadmap.md`'s own backlog entry for this spec, OpenWolf's own logs, `run.sh:12`'s retained placeholder default)
   - Observable: the sweep's full output is captured and every hit is accounted for by name — either as an already-completed fix or a cited exclusion class — with none left unexplained
   - _Requirements: 5.3, 6.1, 6.2_