diff --git a/.wolf/buglog.json b/.wolf/buglog.json
index cadb27ea..c4157c30 100644
--- a/.wolf/buglog.json
+++ b/.wolf/buglog.json
@@ -18450,7 +18450,7 @@
       ],
       "record": ".wolf/bugs/bug-1958.md",
       "gitea_issue": 389,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1959",
@@ -18479,7 +18479,7 @@
       ],
       "record": ".wolf/bugs/bug-1959.md",
       "gitea_issue": 390,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1960",
@@ -18511,7 +18511,7 @@
       ],
       "record": ".wolf/bugs/bug-1960.md",
       "gitea_issue": 391,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1961",
@@ -18537,7 +18537,7 @@
       ],
       "record": ".wolf/bugs/bug-1961.md",
       "gitea_issue": 392,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1962",
@@ -18564,7 +18564,7 @@
       ],
       "record": ".wolf/bugs/bug-1962.md",
       "gitea_issue": 393,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1963",
@@ -18590,7 +18590,7 @@
       ],
       "record": ".wolf/bugs/bug-1963.md",
       "gitea_issue": 394,
-      "gitea_synced_status": "investigating"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1964",
@@ -18620,7 +18620,7 @@
       ],
       "record": ".wolf/bugs/bug-1964.md",
       "gitea_issue": 395,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1965",
@@ -18647,7 +18647,7 @@
       ],
       "record": ".wolf/bugs/bug-1965.md",
       "gitea_issue": 396,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1966",
@@ -18674,7 +18674,7 @@
       ],
       "record": ".wolf/bugs/bug-1966.md",
       "gitea_issue": 397,
-      "gitea_synced_status": "open"
+      "gitea_synced_status": "fixed"
     },
     {
       "id": "bug-1967",
@@ -18700,7 +18700,9 @@
         "bug-1685"
       ],
       "fix_commits": [],
-      "record": ".wolf/bugs/bug-1967.md"
+      "record": ".wolf/bugs/bug-1967.md",
+      "gitea_issue": 398,
+      "gitea_synced_status": "open"
     }
   ]
 }
diff --git a/.wolf/bugs/bug-1958.md b/.wolf/bugs/bug-1958.md
index 5b677893..9e86ea8f 100644
--- a/.wolf/bugs/bug-1958.md
+++ b/.wolf/bugs/bug-1958.md
@@ -13,8 +13,8 @@ tags: ["apiserver", "security", "rbac"]
 related: ["bug-1952"]
 fix_commits: ["736ed81d"]
 gitea_issue: 389
-gitea_synced_status: "open"
-gitea_synced_hash: "499c8864257a"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "a30ea70d85d6"
 ---
 
 # bug-1958: apiserver lets any rbac:control grant create roles and extend its own role (privilege escalation)
diff --git a/.wolf/bugs/bug-1959.md b/.wolf/bugs/bug-1959.md
index 6638ce7f..2920d373 100644
--- a/.wolf/bugs/bug-1959.md
+++ b/.wolf/bugs/bug-1959.md
@@ -13,8 +13,8 @@ tags: ["xcecli", "security", "jwt"]
 related: ["bug-1946"]
 fix_commits: ["03798230"]
 gitea_issue: 390
-gitea_synced_status: "open"
-gitea_synced_hash: "3ee2d40b62c8"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "8b68f96ce374"
 ---
 
 # bug-1959: xcecli logout only clears local config and never calls the logout API, so the token is not revoked
diff --git a/.wolf/bugs/bug-1960.md b/.wolf/bugs/bug-1960.md
index 8542ddd0..a5b9dd62 100644
--- a/.wolf/bugs/bug-1960.md
+++ b/.wolf/bugs/bug-1960.md
@@ -13,8 +13,8 @@ tags: ["controller", "apiserver", "queue", "admin-control"]
 related: ["bug-1938"]
 fix_commits: ["b239db5f", "1ff068f6", "4f579041"]
 gitea_issue: 391
-gitea_synced_status: "open"
-gitea_synced_hash: "e86054beb851"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "1715dc1d9fd5"
 ---
 
 # bug-1960: closed queues accept submissions: controller never checks, apiserver skips the default queue
diff --git a/.wolf/bugs/bug-1961.md b/.wolf/bugs/bug-1961.md
index e5b225ff..d0c9694c 100644
--- a/.wolf/bugs/bug-1961.md
+++ b/.wolf/bugs/bug-1961.md
@@ -13,8 +13,8 @@ tags: ["apiserver", "hosts"]
 related: []
 fix_commits: ["d720132c"]
 gitea_issue: 392
-gitea_synced_status: "open"
-gitea_synced_hash: "7371293540aa"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "da9667fb5610"
 ---
 
 # bug-1961: apiserver ControlHost writes a second response after validateHost rejected the request
diff --git a/.wolf/bugs/bug-1962.md b/.wolf/bugs/bug-1962.md
index 2e54dfdd..ada014ad 100644
--- a/.wolf/bugs/bug-1962.md
+++ b/.wolf/bugs/bug-1962.md
@@ -13,8 +13,8 @@ tags: ["apiserver", "security", "jwt"]
 related: []
 fix_commits: ["387a421c"]
 gitea_issue: 393
-gitea_synced_status: "open"
-gitea_synced_hash: "8d6ac245ba9a"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "409f4cc5764b"
 ---
 
 # bug-1962: apiserver JWT excluded-path check drops the last character of every entry, matching unintended paths
diff --git a/.wolf/bugs/bug-1963.md b/.wolf/bugs/bug-1963.md
index 92ac64f0..28fbb4b9 100644
--- a/.wolf/bugs/bug-1963.md
+++ b/.wolf/bugs/bug-1963.md
@@ -13,8 +13,8 @@ tags: ["scheduler", "host"]
 related: []
 fix_commits: ["2cd02cdc"]
 gitea_issue: 394
-gitea_synced_status: "investigating"
-gitea_synced_hash: "6f389c3e4c8b"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "36afb617d440"
 ---
 
 # bug-1963: xce_scheduler host iteration offers unavailable or reconciling hosts as placement candidates
diff --git a/.wolf/bugs/bug-1964.md b/.wolf/bugs/bug-1964.md
index c334eab6..8aea1a7f 100644
--- a/.wolf/bugs/bug-1964.md
+++ b/.wolf/bugs/bug-1964.md
@@ -13,8 +13,8 @@ tags: ["scheduler", "sim", "equivalence", "limit"]
 related: ["bug-1943"]
 fix_commits: ["3224e906"]
 gitea_issue: 395
-gitea_synced_status: "open"
-gitea_synced_hash: "40588533d766"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "97658c96f870"
 ---
 
 # bug-1964: xce_scheduler --sim does not re-seed limits when a config push arrives mid-replay
diff --git a/.wolf/bugs/bug-1965.md b/.wolf/bugs/bug-1965.md
index 445a54b2..dd0bf67f 100644
--- a/.wolf/bugs/bug-1965.md
+++ b/.wolf/bugs/bug-1965.md
@@ -13,8 +13,8 @@ tags: ["build", "tests", "apiserver"]
 related: []
 fix_commits: ["387cc994"]
 gitea_issue: 396
-gitea_synced_status: "open"
-gitea_synced_hash: "eed0237b5ae0"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "5bf81a74e44c"
 ---
 
 # bug-1965: xce-build.sh apiserver skips the middleware, router and cmd Go test packages
diff --git a/.wolf/bugs/bug-1966.md b/.wolf/bugs/bug-1966.md
index 61f52e45..730dcff8 100644
--- a/.wolf/bugs/bug-1966.md
+++ b/.wolf/bugs/bug-1966.md
@@ -13,8 +13,8 @@ tags: ["apiserver", "docs", "swagger"]
 related: []
 fix_commits: ["f7fef278"]
 gitea_issue: 397
-gitea_synced_status: "open"
-gitea_synced_hash: "d98430bca460"
+gitea_synced_status: "fixed"
+gitea_synced_hash: "bac0daa132f7"
 ---
 
 # bug-1966: apiserver swagger generation fails on hosts.go models.Error; published swagger is a stale stub
diff --git a/.wolf/bugs/bug-1967.md b/.wolf/bugs/bug-1967.md
index 3392ba79..42ef6b41 100644
--- a/.wolf/bugs/bug-1967.md
+++ b/.wolf/bugs/bug-1967.md
@@ -11,6 +11,9 @@ occurrences: 1
 files: ["src/scheduler/src/plugins/limit.c"]
 tags: ["scheduler", "limit", "config"]
 related: ["bug-1964", "bug-1685"]
+gitea_issue: 398
+gitea_synced_status: "open"
+gitea_synced_hash: "1b09440ec632"
 ---
 
 # bug-1967: xce_scheduler ignores limit changes in a re-pushed config: seeding stops at the first existing name