diff --git a/LOTUS_BUGS.md b/LOTUS_BUGS.md
index aafedda17..51e95c6cf 100644
--- a/LOTUS_BUGS.md
+++ b/LOTUS_BUGS.md
@@ -99,7 +99,7 @@ Items from testing, with their fork-level fix path:
 
 ### Code Hygiene / DevEx
 
-- **Automated test suite — seeded, expand coverage.** Harness now in place: `npm test` runs Node's built-in runner via `tsx` (not vitest — Vite 8 is ahead of vitest's range). 19 tests across `utils/common` + `utils/regex`. CI step is informational (`continue-on-error`) — promote to a hard gate when coverage is broader. **Next:** add suites for other pure-logic modules (search filters, ringtone gain math, mxc/url helpers), then component/integration tests.
+- **Automated test suite — harness in place, 108 tests, expand coverage.** `npm test` runs Node's built-in runner via `tsx` (not vitest — Vite 8 is ahead of vitest's range). Covered: `utils/common`, `regex`, `sanitize` (XSS guards), `time`, `matrix`, `mimeTypes`, `sort`, `findAndReplace`, `AsyncSearch`, `ASCIILexicalTable`, message-search filters. Prevention work already caught + fixed a real bug (`findAndReplace` infinite-loop on non-global regex). CI step is informational (`continue-on-error`) — **ready to promote to a hard gate.** **Next:** component/integration tests; more state/reducer logic.
 - **Extensive `as any` casts** across `src/` — gradual typing cleanup.
 - **`types/matrix/` mirrors SDK types** instead of importing them — drift risk.
 - **Hardcoded CDN URL** should move to an env var (the decoration CDN is now single-sourced in `avatarDecorations.ts`, but the literal is still in-repo).