diff --git a/docs/plans/state.json b/docs/plans/state.json
index 3afcb9a..b79d0e6 100644
--- a/docs/plans/state.json
+++ b/docs/plans/state.json
@@ -269,6 +269,29 @@
             "src/daemon/index.ts"
           ],
           "test_status": "11/11 passing (9 costs + 2 commands)"
+        },
+        "tool_allow_deny_profiles": {
+          "priority": "P2",
+          "status": "completed",
+          "description": "Configurable tool filtering with 4 built-in profiles (minimal/messaging/coding/full), global and per-agent/per-provider allow/deny lists with glob patterns, defense-in-depth enforcement at listing and execution",
+          "files_created": [
+            "src/tools/policy.ts",
+            "src/tools/policy.test.ts"
+          ],
+          "files_modified": [
+            "src/config/schema.ts",
+            "src/config/index.ts",
+            "src/tools/registry.ts",
+            "src/tools/executor.ts",
+            "src/tools/index.ts",
+            "src/backends/native/agent.ts",
+            "src/backends/native/orchestrator.ts",
+            "src/daemon/index.ts",
+            "src/gateway/handlers/tools.ts",
+            "src/gateway/handlers/handlers.test.ts",
+            "src/gateway/server.test.ts"
+          ],
+          "test_status": "37/37 passing"
         }
       }
     },
@@ -297,11 +320,11 @@
   },
 
   "overall_progress": {
-    "total_test_count": 569,
+    "total_test_count": 606,
     "all_tests_passing": true,
     "p0_completion": "3/3 (100%)",
     "p1_completion": "4/4 (100%)",
-    "p2_completion": "4/4 (100%)",
-    "next_up": "p2_p3_remaining (docker sandboxing, multi-agent routing, tool profiles, group chat, gateway auth, gemini provider)"
+    "p2_completion": "5/5 (100%)",
+    "next_up": "p2_p3_remaining (docker sandboxing, multi-agent routing, group chat, gateway auth, gemini provider)"
   }
 }