diff --git a/projects/passepartout/architecture/stages/_index.org b/projects/passepartout/architecture/stages/_index.org
index d151923..6c53f10 100644
--- a/projects/passepartout/architecture/stages/_index.org
+++ b/projects/passepartout/architecture/stages/_index.org
@@ -13,8 +13,8 @@ The staged roadmap for Passepartout — from current conventional computing thro
 | Stage | What changes | Threat eliminated |
 |---|---|---|
 | 0 | Linux + Python agent + SQLite (current) | None — starting point |
-| 1 | Social protocol: DID identity, encrypted messaging, data stores | Unauthenticated communication |
 | 2 | The gate as software over host OS | Root as attack path |
+| 1 | Social protocol: DID identity, encrypted messaging, data stores | Unauthenticated communication |
 | 3 | Bare-metal Lisp image, one address space | MMU boundary, process isolation |
 | 4 | In-process LLM inference | API call interception |
 | 5 | Neural weights as plist-native data | Symbolic/neural representation gap |
diff --git a/projects/passepartout/architecture/stages/stage-1-social-protocol.org b/projects/passepartout/architecture/stages/stage-1-social-protocol.org
index 88b4dff..f54e863 100644
--- a/projects/passepartout/architecture/stages/stage-1-social-protocol.org
+++ b/projects/passepartout/architecture/stages/stage-1-social-protocol.org
@@ -5,7 +5,7 @@ tags: :passepartout:roadmap:social-protocol:
 created: 2026-05-24
 ---
 
-← [[id:8cb760e2-37c6-4a78-af4d-f89f69d1678b][Stage 0 — Now]]  → [[id:4a1f23b0-abc3-4def-9876-543210abcdef][Stage 2 — Verification]]
+← [[id:4a1f23b0-abc3-4def-9876-543210abcdef][Stage 2 — Verification]]  → [[id:4a1f23b0-abc4-4def-9876-543210abcdef][Stage 3 — Lisp Machine]]
 
 # Stage 1: [[id:1d074690-a279-59cb-b91d-e9a22ae104ad][Social Protocol]]
 
@@ -178,10 +178,10 @@ These are not libraries but Passepartout systems that must be built:
 
 The sidecar strategy collapses the high-risk items to near-zero implementation risk for the initial release.
 
-← [[id:8cb760e2-37c6-4a78-af4d-f89f69d1678b][Stage 0 — Now]]  → [[id:4a1f23b0-abc3-4def-9876-543210abcdef][Stage 2 — Verification]]
+← [[id:4a1f23b0-abc3-4def-9876-543210abcdef][Stage 2 — Verification]]  → [[id:4a1f23b0-abc4-4def-9876-543210abcdef][Stage 3 — Lisp Machine]]
 
 :PROPERTIES:
 :CREATED:  [2026-05-24 Sun]
-:WEIGHT:  12
+:WEIGHT:  13
 :ID:       4a1f23b0-abc2-4def-9876-543210abcdef
 :END:
diff --git a/projects/passepartout/architecture/stages/stage-2-verification.org b/projects/passepartout/architecture/stages/stage-2-verification.org
index 32184b8..af39d89 100644
--- a/projects/passepartout/architecture/stages/stage-2-verification.org
+++ b/projects/passepartout/architecture/stages/stage-2-verification.org
@@ -5,7 +5,7 @@ tags: :passepartout:roadmap:
 created: 2026-05-24
 ---
 
-← [[id:4a1f23b0-abc2-4def-9876-543210abcdef][Stage 1 — Social Protocol]]  → [[id:4a1f23b0-abc4-4def-9876-543210abcdef][Stage 3 — Lisp Machine]]
+← [[id:8cb760e2-37c6-4a78-af4d-f89f69d1678b][Stage 0 — Now]]  → [[id:4a1f23b0-abc2-4def-9876-543210abcdef][Stage 1 — Social Protocol]]
 
 # Stage 2: Verification Subsystem
 
@@ -178,10 +178,10 @@ The gate runs in the same address space as the PDS (Stage 2 runs on conventional
 - Every action path — user command, LLM proposal, network message, file write — routes through the same decision procedure
 - The gate cannot be bypassed; there is no privileged path
 
-← [[id:4a1f23b0-abc2-4def-9876-543210abcdef][Stage 1 — Social Protocol]]  → [[id:4a1f23b0-abc4-4def-9876-543210abcdef][Stage 3 — Lisp Machine]]
+← [[id:8cb760e2-37c6-4a78-af4d-f89f69d1678b][Stage 0 — Now]]  → [[id:4a1f23b0-abc2-4def-9876-543210abcdef][Stage 1 — Social Protocol]]
 
 :PROPERTIES:
 :CREATED:  [2026-05-24 Sun]
-:WEIGHT:  14
+:WEIGHT:  12
 :ID:       4a1f23b0-abc3-4def-9876-543210abcdef
 :END: