diff --git a/docs/google-app.md b/docs/google-app.md
index 626f861..71fb6f5 100644
--- a/docs/google-app.md
+++ b/docs/google-app.md
@@ -30,7 +30,7 @@ Two Google Cloud projects, both owned by dev@metatroncubesolutions.com:
 
 ## Still to do
 1. ~~Business Profile API access~~ — done by reusing the approved GMB Audit project (see above).
-2. **Verify quorlasocial.com in Google Search Console** (DNS TXT record) — required before Google verifies the app.
+2. ~~Verify quorlasocial.com in Google Search Console~~ — done 2026-10-21 (domain property, owner dev@; DNS TXT `google-site-verification=…` on the Hestia server — keep it).
 3. After deploy: **publish the app** (Audience → Publish app) and submit **verification** (sensitive YouTube scopes):
    Google asks for a demo video of the sign-in and how each scope is used.
 4. **YouTube API audit** (free form) to lift the 10,000 units/day quota and the private-only upload limit.