diff --git a/CHECKPOINT-encryption.md b/CHECKPOINT-encryption.md
index e34db7c..f3f68f3 100644
--- a/CHECKPOINT-encryption.md
+++ b/CHECKPOINT-encryption.md
@@ -6,16 +6,22 @@ verified green at the moment this file was written.
 ## Where things are
 
 - Project: `/home/avi/Projects/Nostr_Keynctr`
-- Git repo: `master` @ `cbbe779` ("Desktop entry + Wayland app id so the
-  taskbar shows the app icon"). Before it: `8a644af` (app icon), `4d9489b`
-  (checkpoint), `c11ab9f` (security upgrades).
+- Git repo: `master` @ `a00c7c9` ("Sidebar brand mark: hummingbird-key artwork
+  replaces the shield icon"). Before it: `cbbe779` (desktop entry/Wayland),
+  `8a644af` (app icon), `c11ab9f` (security upgrades).
 - Working tree: clean apart from this checkpoint update. Note: `concept3.svg`
   shows as deleted in the working tree and `KeynectrAppIconPossibility02.jpeg`
   (the icon source art) is untracked — both left as the user had them, not committed.
 
 ## What was completed
 
-1. **Taskbar icon on KDE Wayland (2026-08-24, `cbbe779`).** The user reported
+1. **In-app brand mark (2026-08-24, `a00c7c9`).** The sidebar logo (the
+   "shield" the user saw in-app) now uses the hummingbird-key artwork
+   (`src/assets/logo.png`, Vite-imported so it is fingerprinted into the
+   build). In dark themes the tile is inverted (white bird on dark) via CSS.
+   The remaining `shield` icons (Unlock-vault button, password/backup buttons)
+   are intentional security affordances, not branding.
+2. **Taskbar icon on KDE Wayland (2026-08-24, `cbbe779`).** The user reported
    no icon after restart. Root cause: on Wayland there are no per-window
    icons — the KDE taskbar resolves the running app through an installed
    `.desktop` file, which Keynectr did not have. Fix:
@@ -24,20 +30,21 @@ verified green at the moment this file was written.
      `~/.local/share/icons/hicolor/512x512/apps/keynectr.png` and
      `~/.local/share/applications/keynectr.desktop` (Icon=keynectr,
      StartupWMClass=keynectr) and refreshes the desktop database. **Run once
-     per machine.**
+     per machine.** Confirmed working by the user.
    - `app.setDesktopName('keynectr.desktop')` in `electron/main.ts` (called
      before `ready`; Electron 43 renamed the old `setDesktopFileName`) pins
      the app id so the desktop file always matches.
-2. **Window + packaged icon (2026-08-24, `8a644af`).** Hummingbird-key artwork
+3. **Window + packaged icon (2026-08-24, `8a644af`).** Hummingbird-key artwork
    as `frontend/build/icon.png` (electron-builder `linux.icon`) and
    `frontend/public/icon.png` (shipped in the asar, loaded by BrowserWindow —
    effective on X11 titlebars and inside packaged builds).
-3. Earlier today: all npm security advisories cleared via major upgrades
+4. Earlier today: all npm security advisories cleared via major upgrades
    (`c11ab9f`), Updates card (`8bce428`), feed profile filter (`55a49b4`),
    publish latency trim (`b001b3c`).
 
 ## Commits added most recently
 
+- `a00c7c9` Sidebar brand mark: hummingbird-key artwork replaces the shield icon
 - `cbbe779` Desktop entry + Wayland app id so the taskbar shows the app icon
 - `8a644af` App icon: hummingbird-key mark for window and packaged Linux builds