diff --git a/memory/claude-usage.db b/memory/claude-usage.db
index b316671..4632299 100644
Binary files a/memory/claude-usage.db and b/memory/claude-usage.db differ
diff --git a/memory/claude-usage.json b/memory/claude-usage.json
index 228ecc4..d93b6e4 100644
--- a/memory/claude-usage.json
+++ b/memory/claude-usage.json
@@ -1,9 +1,9 @@
 {
-  "last_updated": "2026-03-21T04:00:01.941153Z",
+  "last_updated": "2026-03-21T10:00:02.017586Z",
   "source": "api",
-  "session_percent": 2,
-  "session_resets": "2026-03-21T04:59:59.897890+00:00",
-  "weekly_percent": 26,
-  "weekly_resets": "2026-03-27T02:59:59.897906+00:00",
-  "sonnet_percent": 40
+  "session_percent": 0,
+  "session_resets": "2026-03-21T15:00:00.972769+00:00",
+  "weekly_percent": 28,
+  "weekly_resets": "2026-03-27T02:59:59.972789+00:00",
+  "sonnet_percent": 41
 }
\ No newline at end of file
diff --git a/memory/heartbeat-state.json b/memory/heartbeat-state.json
index 099d11f..0b94185 100644
--- a/memory/heartbeat-state.json
+++ b/memory/heartbeat-state.json
@@ -14,7 +14,7 @@
   "lastDocInbox": "2026-02-25T22:01:42.532628Z",
   "lastTechScan": 1773936643,
   "lastMemoryReview": 1774040883,
-  "lastIntraDayXScan": 1774036200,
+  "lastIntraDayXScan": 1774068069,
   "lastInouSuggestion": "2026-03-20T19:48:00+00:00",
   "lastEmail": 1773936643,
   "pendingBriefingItems": [],
diff --git a/memory/x-watch-last.md b/memory/x-watch-last.md
index a7307e1..840636d 100644
--- a/memory/x-watch-last.md
+++ b/memory/x-watch-last.md
@@ -1,11 +1,11 @@
-# Last X Watch: 2026-03-20T19:50:00Z (intra-day scan, 4pm ET)
+# Last X Watch: 2026-03-21T04:38:00Z (midnight scan, ~00:38 AM EDT)
 
 ## NEW THIS SCAN (posted to dashboard):
-- **OpenClaw CVE batch: 3 HIGH severity vulns patched** — CVE-2026-32015 (path hijacking in safeBins, affects 2026.1.21–2026.2.19), CVE-2026-32016 (macOS exec allowlist basename bypass, prior to 2026.2.22), CVE-2026-32025 (WebSocket origin check bypass, prior to 2026.2.25). All patched in 2026.3.x. Source: RedPacket Security, Mar 20 2026.
-- **OpenAI desktop superapp** — Merging ChatGPT, Codex coding platform, and browser into single desktop app. Also acquiring Astral (developer tooling startup) for Codex team. Source: Reuters / CNBC, Mar 19-20 2026.
-- **Trump blasts NATO as "COWARDS"** — Over Strait of Hormuz; 2,500 more Marines deploying to Middle East. Qatar: South Pars damage = $20B/yr revenue loss, 5 years to repair. Source: ABC7 / CNBC, Mar 20 2026.
+- **Markets: Dow & Nasdaq hit intraday correction (4th straight week of losses)** — Dow and Nasdaq touched >10% below recent highs intraday on Fri Mar 20, closed just shy of correction territory. S&P 500 -0.73% on day. Iran war + oil prices driving sustained sell-off. Small caps already in correction. Source: CNBC/Reuters/TheStreet.
+- **Iran escalation: Kharg Island seizure, 3 more warships, Iranian oil sanctions lifted** — New Fri Mar 20 developments: US reportedly considering occupying Iran's Kharg Island to control Strait of Hormuz. 3 additional warships + thousands more troops deploying. Trump admin also lifted sanctions on ~140M barrels of Iranian oil (strategic move, day 21 of war). Source: Reuters/Guardian/CNN.
+- **Sam Altman sexual abuse lawsuit dismissed** — Federal judge Zachary Bluestone dismissed Annie Altman's lawsuit (sister) citing statute of limitations. She is permitted to refile under a different legal theory. Source: Reuters Mar 21 2026.
 
-## NOTE: Bird CLI tokens still 401 — fell back to web search (same as noon scan)
+## NOTE: Bird CLI tokens still 401 — fell back to web search (consistent issue)
 
 ## BLACKLIST — do not surface these again unless concrete new development:
 - NemoClaw / OpenShell — announced + confirmed (covered twice)
@@ -32,6 +32,7 @@
 - SentinelOne $1B revenue milestone + Cloudflare partnership expansion (Mar 16-17)
 - SentinelOne new CFO Sonalee Parekh (starts Mar 24)
 - SentinelOne Q4 earnings beat (Mar 13) + weak Q1 guidance → stock ~$24 target (Guggenheim)
+- SentinelOne CEO Weingarten insider sale $562K at $14.47 (Mar 17)
 - NVIDIA adds Hyundai/BYD to self-driving tech (Mar 16)
 - Gold crossed $5,000 milestone (Mar 17)
 - OpenAI + AWS Pentagon deal (on dashboard)
@@ -65,8 +66,11 @@
 - Tencent/Baidu OpenClaw install events in China — context in ZhipuAI price hike item
 - Cloudflare + Coinbase stablecoin AI agent payments — on dashboard (noon scan)
 - ZhipuAI 20% price hike on OC-optimized model — on dashboard (noon scan)
-- OpenClaw CVE batch (32015/32016/32025) — NOW ON DASHBOARD (4pm scan)
-- OpenAI desktop superapp + Astral acquisition — NOW ON DASHBOARD (4pm scan)
-- Trump "COWARDS" post / 2500 Marines to ME — NOW ON DASHBOARD (4pm scan)
+- OpenClaw CVE batch (32015/32016/32025) — on dashboard (4pm scan)
+- OpenAI desktop superapp + Astral acquisition — on dashboard (4pm scan)
+- Trump "COWARDS" post / 2500 Marines to ME — on dashboard (4pm scan)
 - StepFun IPO prep (Hong Kong) — Feb 25 news, stale
 - GLM-5 SWE-Bench 77.8% / Kimi K2.5 76.8% — benchmark table, covered implicitly
+- Sam Altman lawsuit dismissed (midnight scan) — NOW ON DASHBOARD
+- Markets 4th week of losses / Dow+Nasdaq intraday correction (midnight scan) — NOW ON DASHBOARD
+- Iran escalation: Kharg Island / 3 more warships / Iranian oil sanctions lifted (midnight scan) — NOW ON DASHBOARD