diff --git a/desktop/connection-check.ts b/desktop/connection-check.ts
index a7a80683..15cbe6ec 100644
--- a/desktop/connection-check.ts
+++ b/desktop/connection-check.ts
@@ -134,7 +134,7 @@ function describeOpenCodeRefusal(status: number) {
     return "OpenCode refused the key (HTTP 401). Copy a key from a workspace with a Go subscription.";
 
   if (status === 403)
-    return "OpenCode refused this model for the key (HTTP 403). In Console Settings › Privacy, DeepSeek needs the Global region and Muse Spark Contributor needs “Allow paid endpoints that train on request data”.";
+    return "OpenCode refused this model for the key (HTTP 403). In Console Settings › Privacy, Muse Spark Contributor needs “Allow paid endpoints that train on request data”.";
 
   if (status === 429)
     return "OpenCode reports a usage limit for this model (HTTP 429). Go limits reset over 5-hour, weekly and monthly windows.";
diff --git a/docs/cloud-reviews.md b/docs/cloud-reviews.md
index 9e8b6555..1807f3fe 100644
--- a/docs/cloud-reviews.md
+++ b/docs/cloud-reviews.md
@@ -313,9 +313,15 @@ it. Queue messages use JSON to preserve millisecond expiry times through the SDK
 
 ## Validation
 
-The current worker is `moke-review-engine:4cc8c03`, image
-`im-01M6DBQX7M1HEP05AA68MHBW7R`, with protocol 5, packet prompt v8 and code index
-v2. `moke-review-engine:latest` resolves to the same image. On 2026-11-02 it passed
+The current worker is `moke-review-engine:9f4e2fb67`, image
+`im-01M6KD1KYF0PJZMCQJXBRPKRHX`, with protocol 5, packet prompt v10 and code index
+v3. `moke-review-engine:latest` resolves to the same image. On 2026-11-04 it reported
+the expected identity in a fresh sandbox with no network; no cloud review has run on
+it yet. The `moke-reviews-opencode-go-api` Modal Secret was created the same day.
+
+The previous worker is `moke-review-engine:4cc8c03`, image
+`im-01M6DBQX7M1HEP05AA68MHBW7R`, with packet prompt v8 and code index v2, kept for
+rollback. On 2026-11-02 it passed
 strict identity, migration-hash, PDF worker and blocked-network checks in a fresh
 sandbox. One bounded cloud packet review of the authored schematic then ran on
 Muse Spark 1.3, returned automatically and imported, with no sandbox left running.
diff --git a/tests/smoke/opencode-go.test.ts b/tests/smoke/opencode-go.test.ts
index 34f10bec..2d06b68b 100644
--- a/tests/smoke/opencode-go.test.ts
+++ b/tests/smoke/opencode-go.test.ts
@@ -56,7 +56,7 @@ test("an OpenCode Go key keeps its canonical route and can run in the cloud", ()
     expect(() => parseProviderConfiguration(JSON.stringify(invalid))).toThrow(CredentialError);
 });
 
-/** A Chat Completions stream with a reasoning field, as OpenCode Go returns for DeepSeek. */
+/** A Chat Completions stream with a reasoning field, as OpenCode Go returns for GLM. */
 function completions() {
   const chunks = [
     {
@@ -312,7 +312,7 @@ test("the OpenCode Go key check sends the session, client and user agent OpenCod
   const check = await Effect.runPromise(
     checkConnection({
       baseUrl: `http://127.0.0.1:${server.port}/v1`,
-      model: "deepseek-v4.1-flash",
+      model: "glm-5.3-flash",
       apiKey: Redacted.make("oc_sk_fixture"),
       headers: openCodeHeaders("0.1.0", "moke-check-1"),
     }),