diff --git a/.gitignore b/.gitignore
index 85951eed..4995b7f5 100644
--- a/.gitignore
+++ b/.gitignore
@@ -61,3 +61,11 @@ build/macos/
 image-recipe/output/
 image-recipe/*.iso
 image-recipe/*.img
+
+# Loop tool artifacts (created in every subdirectory)
+*/loop/
+loop/loop/
+loop/loop.log.bak
+
+# Separate repos nested in tree
+web/
diff --git a/loop/plan.md b/loop/plan.md
index edd8f414..75ab3550 100644
--- a/loop/plan.md
+++ b/loop/plan.md
@@ -76,7 +76,7 @@
 
 ## Phase 6: Alpha ISO Build
 
-- [ ] **ISO-001** — fix(iso): sync all current changes to the dev server. Run full deploy: `./scripts/deploy-to-target.sh --live`. Verify everything works on http://192.168.1.228. Then SSH to the server and run the ISO build: `cd ~/archy/image-recipe && sudo DEV_SERVER=archipelago@localhost ./build-auto-installer-iso.sh`. The ISO must build successfully and be saved to `results/`. Report the ISO path and size.
+- [x] **ISO-001** — fix(iso): sync all current changes to the dev server. Run full deploy: `./scripts/deploy-to-target.sh --live`. Verify everything works on http://192.168.1.228. Then SSH to the server and run the ISO build: `cd ~/archy/image-recipe && sudo DEV_SERVER=archipelago@localhost ./build-auto-installer-iso.sh`. The ISO must build successfully and be saved to `results/`. Report the ISO path and size.
 
 - [x] **ISO-002** — fix(iso): verify the ISO image configs include all latest changes. Check that `image-recipe/configs/` has up-to-date: `archipelago.service`, `nginx-archipelago.conf`. If they differ from the live server, update them. The ISO must produce a bootable system identical to the current live server.