diff --git a/REFACTORING-AUDIT.md b/REFACTORING-AUDIT.md
index 4218a1e..e182c17 100644
--- a/REFACTORING-AUDIT.md
+++ b/REFACTORING-AUDIT.md
@@ -276,6 +276,7 @@ The current composition root is `cmd/serve.go`; `repository.System` aggregates P
 - Mapping validates domain value objects at the boundary and preserves timestamps, roles, public keys, identity validation timestamps, and birth-date representation.
 - Focused mapping tests and the full Auth test suite pass; commit `58f6a43`.
 - A003 remains in progress: PostgreSQL/Redis adapter ownership and use-case integration still need to move out of the legacy `repository/db` composition.
+- Added `auth/infrastructure/postgres` and `auth/infrastructure/redis` composition boundaries and switched `cmd/serve.go` to use them; the legacy adapters remain wrapped behind these boundaries pending per-repository port integration (`8ce3727`).
 
 ### `I001` — publisher-backed ICO purchase map