diff --git a/sync/CURRENT.md b/sync/CURRENT.md
index 48d9659..d602b39 100644
--- a/sync/CURRENT.md
+++ b/sync/CURRENT.md
@@ -1,6 +1,6 @@
 # Current TIP Sync State
 
-Updated: 2026-05-09 22:15 UTC
+Updated: 2026-05-09 22:32 UTC
 
 ## Newest Work
 
@@ -118,6 +118,12 @@ Updated: 2026-05-09 22:15 UTC
     - RunPod provider is online for both lanes
     - `contact_llm` status correctly reports `neverTrained: true`
     - `pulso_llm` / `contact_llm` are trainable but not adopted yet because no local Ollama model tags exist yet
+  - Gitea commits:
+    - transceiver-db sync handoff: `3926a1e`
+    - MAGATAMA implementation and sanitized training pools: `8fb406b`
+  - privacy guard:
+    - MAGATAMA pre-commit correctly blocked raw private-network training rows
+    - exported Gitea/RunPod training pools now sanitize private IPs, local paths, emails and credentials before commit
   - safety/automation note:
     - do not mark a lane training run successful unless an artifact exists, imports locally, passes smoke tests, and the active alias/version is switched
     - this remains the rule for all LLM lanes
diff --git a/sync/history/2026-05-09-magatama-multi-llm-training-lanes.md b/sync/history/2026-05-09-magatama-multi-llm-training-lanes.md
index b30c271..48e57ea 100644
--- a/sync/history/2026-05-09-magatama-multi-llm-training-lanes.md
+++ b/sync/history/2026-05-09-magatama-multi-llm-training-lanes.md
@@ -72,6 +72,20 @@ RunPod lane exports rebuilt and deployed live on Erik:
 - `contact_llm` status correctly reports `neverTrained: true`.
 - `pulso_llm` / `contact_llm` are trainable but not adopted yet because no local Ollama model tags exist yet.
 
+## Gitea / Privacy Closure
+
+- Sync handoff commit: `3926a1e`
+- MAGATAMA implementation and training-pool commit: `8fb406b`
+- MAGATAMA pre-commit correctly blocked the first attempt because raw training rows contained private-network data.
+- Export path is now hardened:
+  - private IPs are replaced with placeholders
+  - local `/Users/...` paths are replaced
+  - emails, tokens, secrets and passwords are redacted
+- The pushed MAGATAMA commit passed:
+  - secrets scan
+  - private data scan
+  - config values scan
+
 ## Operational Rule
 
 Training success only counts when all of the following are true: