diff --git a/clients/starr-pass/session-logs/2026-06/2026-06-10-discord-bot-dns-spf-m365-onboarding.md b/clients/starr-pass/session-logs/2026-06/2026-06-10-discord-bot-dns-spf-m365-onboarding.md
index 0cb6094..af3ba41 100644
--- a/clients/starr-pass/session-logs/2026-06/2026-06-10-discord-bot-dns-spf-m365-onboarding.md
+++ b/clients/starr-pass/session-logs/2026-06/2026-06-10-discord-bot-dns-spf-m365-onboarding.md
@@ -121,10 +121,24 @@ User Manager        Authentication Administrator       [ASSIGNED]
 
 ---
 
+## Update: 10:15 PT — M365 account cleanup
+
+Per Mike Swanson's explicit instruction, three accounts deleted from Starr Pass M365 tenant:
+
+| Account | Object ID | HTTP |
+|---|---|---|
+| bshinn@starrpass.com (Brian Shinn) | 93be902c-fc46-4993-bda5-5556af2f21cd | 204 |
+| sss@starrpass.com (Sharon Shinn-Smith) | 4563c56e-9cf8-4079-8f7c-04797e4951f6 | 204 |
+| admin@starrpass.com (Admin) | f5ddcc32-f52e-4c7f-b1a8-39de999d6562 | 204 |
+
+Remaining: `sysadmin@starrpass.com` (Brian Shinn, enabled, licensed) — verified via Graph API post-deletion.
+Deleted accounts are in M365 recycle bin for 30 days. Token tier used: user-manager.
+
+---
+
 ## Pending / Incomplete Tasks
 
 - **Legacy DKIM key at `default._domainkey.starrpass.com`** — old RSA key from IX mail era, still present in zone. Flagged to Mike; awaiting confirmation to remove.
-- **`admin@starrpass.com`** — disabled/unlicensed account, looks like an old break-glass. Worth confirming with client it can stay disabled or be cleaned up.
 
 ---