diff --git a/deploy/stages.md b/deploy/stages.md
index 8062a78..8bf5592 100644
--- a/deploy/stages.md
+++ b/deploy/stages.md
@@ -101,3 +101,10 @@ The pipeline pushes images to the Gitea container registry
 - [ ] runner shows _online_ under Gitea → Settings → Actions → Runners
 - [ ] a test workflow run executes on the runner
 - [ ] `.env` files are mode 600, owned by `deploy`
+
+## Provisioning log
+
+- 2026-07-05: Test/Int stage directories, `.env` files, Caddy vhosts
+  (TLS live), `deploy` user, act_runner (v0.6.1, systemd) and registry
+  login provisioned; Gitea Actions enabled instance-wide (`app.ini` on
+  BASEL, backup kept). First pipeline run = this commit.