diff --git a/docs/how-to/zot/add-container-version-sync-check.md b/docs/how-to/zot/add-container-version-sync-check.md
index 0ee478c..cd9f39e 100644
--- a/docs/how-to/zot/add-container-version-sync-check.md
+++ b/docs/how-to/zot/add-container-version-sync-check.md
@@ -1,7 +1,6 @@
 ---
 title: Add Container Version Sync Check
 modified: 2026-02-20
-status: active
 requires:
   - pin-container-versions
   - add-dagger-nix-build
@@ -54,9 +53,9 @@ Container-to-service name mapping: `quartz` → `docs`, `kiwix-serve` → `kiwix
 
 Filled in `current-version` for all hybrid services: navidrome (v0.60.3), miniflux (2.2.17), teslamate (v2.2.0), transmission (4.0.6-r4), kiwix (3.8.1), forgejo-runner (0.19.11). Added authentik (2025.10.1) as a new hybrid entry.
 
-### ntfy nix version skew (fix forward)
+### ntfy nix version skew (resolved)
 
-The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh 2.15.0. Rather than reverting, ntfy is excluded from `NIX_PACKAGE_MAP` and a new dependency card [[fix-ntfy-nix-version]] was created to build the nix derivation from the forge mirror at v2.17.0.
+The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh 2.15.0. This was resolved in [[fix-ntfy-nix-version]] by building a custom nix derivation from the forge mirror. The version check now extracts the version from local nix files via regex, falling back to Dagger for unmodified nixpkgs packages.
 
 ## Key Files
 
@@ -69,10 +68,10 @@ The check discovered that ntfy's Dockerfile pins v2.17.0 but nixpkgs has ntfy-sh
 ## Verification
 
 - [x] `mise run container-version-check --all-files` passes with no errors
-- [ ] Intentionally changing a Dockerfile ARG without updating `service-versions.yaml` fails the check
+- [x] Intentionally changing a Dockerfile ARG without updating `service-versions.yaml` fails the check
 - [x] `service-versions.yaml` has `current-version` populated for all hybrid services
 - [x] Nix-only container versions (authentik) checked via Dagger
-- [ ] ntfy nix version check deferred to [[fix-ntfy-nix-version]]
+- [x] ntfy nix version resolved via [[fix-ntfy-nix-version]]
 
 ## Related