diff --git a/memory/claude-usage.db b/memory/claude-usage.db
index e6538ff..d3d6b43 100644
Binary files a/memory/claude-usage.db and b/memory/claude-usage.db differ
diff --git a/memory/claude-usage.json b/memory/claude-usage.json
index d217df6..6bd0077 100644
--- a/memory/claude-usage.json
+++ b/memory/claude-usage.json
@@ -1,9 +1,9 @@
 {
-  "last_updated": "2026-03-21T16:00:02.278076Z",
+  "last_updated": "2026-03-21T22:00:01.592745Z",
   "source": "api",
-  "session_percent": 0,
-  "session_resets": "2026-03-21T20:00:00.236073+00:00",
-  "weekly_percent": 31,
-  "weekly_resets": "2026-03-27T03:00:00.236096+00:00",
-  "sonnet_percent": 43
+  "session_percent": 11,
+  "session_resets": "2026-03-22T01:00:00.540288+00:00",
+  "weekly_percent": 33,
+  "weekly_resets": "2026-03-27T03:00:00.540308+00:00",
+  "sonnet_percent": 45
 }
\ No newline at end of file
diff --git a/memory/git-audit-lastfull.txt b/memory/git-audit-lastfull.txt
index 267ad6f..906bc5f 100644
--- a/memory/git-audit-lastfull.txt
+++ b/memory/git-audit-lastfull.txt
@@ -1 +1 @@
-1774022619
+1774109020
diff --git a/memory/heartbeat-state.json b/memory/heartbeat-state.json
index 0b7f945..36f6c2d 100644
--- a/memory/heartbeat-state.json
+++ b/memory/heartbeat-state.json
@@ -14,8 +14,8 @@
   "lastDocInbox": "2026-02-25T22:01:42.532628Z",
   "lastTechScan": 1773936643,
   "lastMemoryReview": 1774040883,
-  "lastIntraDayXScan": 1774104022,
-  "lastInouSuggestion": "2026-03-20T19:48:00+00:00",
+  "lastIntraDayXScan": 1774156800,
+  "lastInouSuggestion": 1774156800,
   "lastEmail": 1773936643,
   "pendingBriefingItems": [],
   "lastOvernightAgentWork": "2026-02-28T12:20:00Z",
diff --git a/memory/x-watch-last.md b/memory/x-watch-last.md
index 66e35a8..7ba489c 100644
--- a/memory/x-watch-last.md
+++ b/memory/x-watch-last.md
@@ -1,15 +1,23 @@
-# Last X Watch: 2026-03-21T10:38:00-04:00 (10:38 AM EDT intra-day scan)
+# Last X Watch: 2026-03-21T17:22:00-04:00 (5:22 PM EDT intra-day scan)
 
 ## NEW THIS SCAN (posted to dashboard):
-- **Cursor Composer 2 Is Secretly Kimi K2.5** — Devs discovered API returning `kimi-k2p5-rl-0317` model ID. Cursor ($50B valuation, ~$2B ARR) launched it as "proprietary in-house." Moonshot confirmed commercial partnership. License concerns (Modified MIT requires attribution for big-revenue products). Mass backlash, users uninstalling. Source: @DataSavant @nomastudioai @grok
-- **Iran $200B war request + contradictory signals** — Trump says "winding down" + $200B Congress supplemental request + CBS reports "considering boots on the ground" all within 24h. Oil easing to ~$96.6/bbl. Nasdaq futures +0.45%, DJI futures +0.39% on "wind down" language. Source: @VanguardIQ_ @KobeissiLetter
-- **N-able / Manchester City cybersecurity partnership** — $NABL announced official cybersecurity partner sponsorship with Man City (Mar 19). Brand/marketing play. Source: @Investors_Hub @tenet_research
+- **Markets: Nasdaq Enters Correction — 4th Weekly Loss (Mar 20 Close)** — S&P 500 -1.51% to 6,506 (below 200-day MA). Nasdaq -2.01% to 21,647 (correction territory). Dow -444pts to 45,577. Iran war + Treasury yields (10yr 4.32%). Sources: CNBC/Bloomberg/TheStreet.
+- **Microsoft Foundry + Fireworks AI: Kimi K2.5 & DeepSeek V3.2 in Azure Enterprise** — Azure Foundry runs Fireworks AI inference (public preview, launched Mar 11). Models: Kimi K2.5, DeepSeek V3.2/V3.2-Speciale, MiniMax M2.5, OpenAI gpt-oss-120b. 50+ tok/sec SLA. Sources: AwesomeAgents / AIBusiness / devblogs.microsoft.com.
+- **💡 inou today: Build ChatGPT GPT connector** — Posted to dashboard as inou daily suggestion.
+
+## NOTHING NEW (already covered or irrelevant):
+- Fireworks/Kimi K2.5 controversy (Cursor license clarification) — already on dashboard from 1:35 PM scan
+- OpenAI GPT-5.4 mini/nano — already on dashboard
+- OpenAI superapp (ChatGPT + Codex + browser merge) — already on dashboard from 4pm scan
+- Trump EO: Army-Navy game broadcast protection (Mar 20) — sports, Johan doesn't care
+- SentinelOne: no new developments beyond CEO insider sale (already covered)
+- N-able/NABL: no new acquisition news
 
 ## BIRD CLI STATUS
-- user-tweets: 401 for all handles (@Cloudflare, @OpenAI, @steipete etc.) — auth tokens still broken
-- search: Working via web fallback
+- Still 401 for user-tweets — auth tokens broken
+- web_search rate-limited to 1/sec (free plan), serialized queries
 
-## BLACKLIST — do not surface these again unless concrete new development:
+## DEDUP REFERENCE — do not surface these again unless concrete new development:
 - NemoClaw / OpenShell — announced + confirmed (covered twice)
 - OpenClaw 2026.3.11/3.12/3.13 releases
 - Ollama as official OC provider
@@ -35,6 +43,7 @@
 - SentinelOne new CFO Sonalee Parekh (starts Mar 24)
 - SentinelOne Q4 earnings beat (Mar 13) + weak Q1 guidance → stock ~$24 target (Guggenheim)
 - SentinelOne CEO Weingarten insider sale $562K at $14.47 (Mar 17)
+- SentinelOne ESOP shelf filing $291M (Mar 19) — on dashboard via prior scan
 - NVIDIA adds Hyundai/BYD to self-driving tech (Mar 16)
 - Gold crossed $5,000 milestone (Mar 17) — now at $4,516 (eased from peak)
 - OpenAI + AWS Pentagon deal (on dashboard)
@@ -49,7 +58,7 @@
 - OpenClaw crypto scam warning — steipete (on dashboard)
 - AlexFinn comprehensive OC guide video (on dashboard)
 - Trump @realDonaldTrump — Iran war ongoing, covered
-- NABL/N-able — Manchester City partnership (now on dashboard, Mar 19 news)
+- NABL/N-able — Manchester City cybersecurity partner (on dashboard, Mar 19)
 - healer-alpha on OpenRouter (steipete RT) — not OC-specific
 - AlexFinn OC cron bloat fix + Friday bootcamp — on dashboard
 - MiniMax M2.7 OC harness benchmark RT — promo, covered
@@ -76,6 +85,17 @@
 - Sam Altman lawsuit dismissed (midnight scan) — on dashboard
 - Markets 4th week of losses / Dow+Nasdaq intraday correction (midnight scan) — on dashboard
 - Iran escalation: Kharg Island / 3 more warships / Iranian oil sanctions lifted (midnight scan) — on dashboard
-- Cursor Composer 2 = Kimi K2.5 (this scan) — NOW ON DASHBOARD
-- Iran $200B war request + contradictory wind-down signals (this scan) — NOW ON DASHBOARD
-- N-able / Manchester City cybersecurity partner (this scan) — NOW ON DASHBOARD
+- Cursor Composer 2 = Kimi K2.5 (10:38 AM scan) — on dashboard
+- Iran $200B war request + contradictory wind-down signals (10:38 AM scan) — on dashboard
+- N-able / Manchester City cybersecurity partner (10:38 AM scan) — on dashboard
+- Elon Musk Twitter jury verdict ~$2.6B (1:35 PM scan) — on dashboard
+- OpenAI doubling to 8,000 employees (1:35 PM scan) — on dashboard
+- Microsoft MAI-Image-2 #3 Arena (1:35 PM scan) — on dashboard
+- Cursor/Kimi K2.5 Fireworks license clarification (1:35 PM scan) — on dashboard
+- Clavitor/Claditor brand check — clear (1:35 PM scan) — on dashboard
+- CNBC OpenClaw "ChatGPT moment" / Jensen Huang keynote validation (5:12 PM scan) — on dashboard
+- CVE-2026-32051 OC auth bypass CVSS 8.8 (5:12 PM scan) — on dashboard
+- Natanz nuclear facility attacked, IAEA confirmed (5:12 PM scan) — on dashboard
+- S&P 500 breaks 200-day MA, 4th weekly loss at 6,606 (5:12 PM scan) — UPDATED: Nasdaq now confirmed correction, S&P 6,506 final close (5:22 PM scan)
+- Microsoft Foundry + Fireworks AI enterprise (Mar 11, surfaced 5:22 PM scan) — on dashboard
+- Trump EO: Army-Navy game broadcast protection (Mar 20) — sports, skipped