diff --git a/docs/UPSTREAM-SYNC.md b/docs/UPSTREAM-SYNC.md
index e111fe3..84bbd8b 100644
--- a/docs/UPSTREAM-SYNC.md
+++ b/docs/UPSTREAM-SYNC.md
@@ -253,6 +253,7 @@ by judgement, not by scan.
 | `.github/workflows/labels.yml` | the sweep dispatch decides the forge inline and declares a client; a workflow has no shell to call `forge_preflight` from. #205 ports it |
 | `.github/workflows/refs-guard.yml` | schedules its job on GitHub only, so an action that can only refuse here does not stand red. #199 removes the gate |
 | `.github/workflows/release-exercise.yml` | pins `CEREMONY_FORGE: github` deliberately: the exercise drives the GitHub path |
+| `actions/docs-sync/docs-sync.sh` | fetches the doctrine mirror from the forge in `GITHUB_SERVER_URL`, and refuses rather than guessing one (#201) |
 
 Four of those are **temporary** and say which issue removes them. That is the
 point of listing them rather than exempting them: a forge-delta location with