diff --git a/clients/prairie-schooner/session-logs/2026-07/2026-07-21-howard-phase2-billing.md b/clients/prairie-schooner/session-logs/2026-07/2026-07-21-howard-phase2-billing.md
new file mode 100644
index 00000000..87a7ec6d
--- /dev/null
+++ b/clients/prairie-schooner/session-logs/2026-07/2026-07-21-howard-phase2-billing.md
@@ -0,0 +1,55 @@
+## User
+- **User:** Howard Enos (howard)
+- **Machine:** Howard-Home
+- **Role:** tech
+
+# Prairie Schooner — Phase 2 Billing (Server Migration #32544)
+
+## Session Summary
+
+Pulled up the full Prairie Schooner server migration context to bill the remaining work on Syncro ticket #32544 (id 113778439). Reviewed all session logs from the engagement (7/7 through 7/21), the five tracker issues (claudetools #82-86, all closed with detailed comments), and the existing billing on the ticket.
+
+Confirmed the existing invoice #68039 ($450, 3.0h remote) covered only the 7/7 phase 1 work (data pre-seed, QB safe-copy, DC promotion). The 7/14 through 7/21 work had not been billed — no separate ticket or invoice existed for it despite Howard's initial assumption that 7/14 was already covered.
+
+Added a second billing round to the same ticket: 3.0h remote @ $150 = $450 covering the network swap (SonicWall to UDM Pro), QuickBooks database migration, FSMO transfer, workstation verification, and old server shutdown. The 7/21 TPS-Tina DNS fix and McAfee removal were documented in the comment as warranty (no charge). Invoice #68063 created, block-rate upsell note applied. Ticket left In Progress for the remaining #85 decom work.
+
+## Key Decisions
+
+- Billed all phase 2 work as remote per Howard's direction, even though 7/15 was an onsite visit — Howard's call on how to categorize the hours.
+- Kept ticket #32544 In Progress rather than marking Invoiced — old DC decommission (#85) still has remaining steps (formal demotion, CA migration, DNS cleanup).
+- 7/21 warranty work (0.5h TPS-Tina DNS fix + McAfee removal) documented in the resolution comment but not billed separately — covered under warranty.
+- Comment and line item description written to be distinct from the phase 1 invoice, showing the value of the phase 2 work specifically.
+
+## Configuration Changes
+
+- Syncro #32544: comment 424733786 (Resolution — phase 2 work detail, 7/14 through 7/21)
+- Syncro #32544: line item 43359610 (3.0h remote @ $150)
+- Syncro invoice #68063 (id 1651123359) created — $450.00, note set (block-rate upsell)
+
+## Credentials & Secrets
+
+None new. Used Howard's Syncro API key from vault (`msp-tools/syncro-howard`).
+
+## Infrastructure & Servers
+
+- Syncro tenant: computerguru.syncromsp.com. Customer: The Prairie Schooner (cid 3664974), no prepay block.
+
+## Commands & Outputs
+
+- Billing flow: POST comment -> POST add_line_item -> POST invoice -> PUT invoice note -> bot alert
+- Invoice #68063 verified: single line item (phase 2 only), $450.00 total, no duplication of phase 1 line
+
+## Pending / Incomplete Tasks
+
+- **#85 (old DC decommission):** TPS-SERVER shut down 7/19 but not formally demoted. Remaining: power on temporarily, run dcpromo demotion, migrate or retire Enterprise Root CA, clean stale DNS/AD records, remove .125 from UDM Pro DHCP DNS, retire hardware.
+- **Tina's password:** not in vault, needs reset on TPS-SVR and vaulting.
+- **Wiki article stale:** `wiki/clients/the-prairie-schooner.md` needs recompile (migration complete, SonicWall replaced, McAfee removed).
+
+## Reference Information
+
+- Syncro ticket: #32544 (id 113778439), https://computerguru.syncromsp.com/tickets/113778439
+- Invoice #68039 (id 1651029914) — phase 1, $450 (7/7 work)
+- Invoice #68063 (id 1651123359) — phase 2, $450 (7/14-7/21 work)
+- Tracker issues: claudetools #82-86 (all closed)
+- Bot alert: message_id 1529230170718998628
+- Total billed on this migration: $900 (6.0h across two invoices)