diff --git a/.planning/ROADMAP.md b/.planning/ROADMAP.md
index 95a7ecd..995be66 100644
--- a/.planning/ROADMAP.md
+++ b/.planning/ROADMAP.md
@@ -14,7 +14,7 @@
 |---|-------|------|--------------|
 | 1 | Foundation | Fresh `backend/` Go package boots, renders HTMX, talks to Postgres | FOUND-01..05 |
 | 2 | Authentication | Complete (7/7) | AUTH-01..07 |
-| 3 | 2/3 | In Progress|  |
+| 3 | Tablos CRUD | Complete (3/3) | TABLO-01..06 |
 | 4 | Tasks (Kanban) | A user can run a kanban board inside a tablo | TASK-01..07 |
 | 5 | Files | A user can attach, list, download, delete files on a tablo | FILE-01..06 |
 | 6 | Background Worker | A second binary runs jobs against the same Postgres | WORK-01..04 |
@@ -82,7 +82,7 @@ Plans:
 
 **User-in-loop:** Approve the `tablos` table schema (ownership model, soft-delete vs hard-delete, slug strategy).
 
-**Plans:** 2/3 plans executed
+**Plans:** 3/3 plans executed
 Plans:
 - [x] 03-01-PLAN.md — Wave 0: migration 0003_tablos + sqlc queries + handlers_tablos_test.go RED scaffold + button.css danger/neutral variants
 - [x] 03-02-PLAN.md — Vertical slice 1: dashboard list + inline-form create (HTMX OOB swap; TABLO-01, TABLO-02, TABLO-06)
diff --git a/.planning/STATE.md b/.planning/STATE.md
index c3857dc..6d92b8f 100644
--- a/.planning/STATE.md
+++ b/.planning/STATE.md
@@ -3,13 +3,13 @@ gsd_state_version: 1.0
 milestone: v1.0
 milestone_name: milestone
 status: in_progress
-last_updated: "2026-05-15T05:56:08.374Z"
+last_updated: "2026-05-15T06:09:29.514Z"
 progress:
   total_phases: 7
-  completed_phases: 2
+  completed_phases: 3
   total_plans: 14
-  completed_plans: 13
-  percent: 93
+  completed_plans: 14
+  percent: 100
 ---
 
 # STATE
@@ -23,7 +23,7 @@ progress:
 See: `.planning/PROJECT.md` (updated 2026-05-14)
 
 **Core value:** A user can sign in and run the Tablos workflow — create tablos, manage their tasks (kanban), and attach files — without a JS framework.
-**Current focus:** Phase 03 — tablos-crud
+**Current focus:** Phase 04 — tasks-kanban (Phase 03 complete)
 
 ## Phase Status
 
@@ -31,7 +31,7 @@ See: `.planning/PROJECT.md` (updated 2026-05-14)
 |---|-------|--------|
 | 1 | Foundation | ✓ Complete |
 | 2 | Authentication | ✓ Complete — VERIFIED PASS (2026-05-14) |
-| 3 | Tablos CRUD | ◆ In progress — Plans 01+02 complete, Plan 03 pending |
+| 3 | Tablos CRUD | ✓ Complete — All 3 plans done, TABLO-01..06 closed, verified 2026-05-15 |
 | 4 | Tasks (Kanban) | ○ Pending |
 | 5 | Files | ○ Pending |
 | 6 | Background Worker | ○ Pending |
@@ -39,7 +39,7 @@ See: `.planning/PROJECT.md` (updated 2026-05-14)
 
 ## Active Phase
 
-**Phase 3: Tablos CRUD** — Planned. 3 plans in 3 sequential waves. Ready to execute. Requirements: TABLO-01..06 covered. Planned 2026-05-15.
+**Phase 4: Tasks (Kanban)** — Pending. Phase 3 complete (2026-05-15). All TABLO-01..06 requirements closed.
 
 ## Verification Record
 
@@ -70,6 +70,9 @@ See: `.planning/PROJECT.md` (updated 2026-05-14)
 - **NewRouter extended with TablosDeps parameter** — second explicit deps param before csrfKey; all call sites updated (03-01)
 - **index_templ.go deleted manually after emptying index.templ** — templ generates broken import when .templ has no components (03-02)
 - **Non-HTMX validation error re-fetches tablos and renders full dashboard** — no form state threading; simpler than threading form through full page (03-02)
+- **_zone hidden field (title|desc) in edit fragments** — unified POST /tablos/{id} handler reads _zone to select which display fragment to return; misuse only affects response body, not DB state (03-03)
+- **loadOwnedTablo helper for all parametric handlers** — uuid.Parse + GetTabloByID + ownership check factored into single function; 404 on any failure, 403 never used (D-04) (03-03)
+- **TabloDeleteButtonFragment canonical delete-zone** — TabloCard delegates to it; single source of truth for zone HTML across card and detail-page contexts (03-03)
 
 ## Performance Metrics
 
@@ -84,6 +87,7 @@ See: `.planning/PROJECT.md` (updated 2026-05-14)
 | 02-authentication | 07 | ~25min | 1 | 18 |
 | 03-tablos-crud | 01 | ~15min | 3 | 10 |
 | 03-tablos-crud | 02 | ~4min | 3 | 8 |
+| 03-tablos-crud | 03 | ~30min | 3 | 5 |
 
 ## Notes
 
@@ -108,6 +112,9 @@ See: `.planning/PROJECT.md` (updated 2026-05-14)
 - Phase 3 Plan 02 SUMMARY: `.planning/phases/03-tablos-crud/03-02-SUMMARY.md`
 - Commits (03-02): 43ddf25 (tablos templates + layout footer), 5db9215 (tablo handlers + router wiring), c08da7f (delete retired index.templ)
 - 03-02 complete — all 3 tasks done including human-verify checkpoint approval
+- Phase 3 Plan 03 SUMMARY: `.planning/phases/03-tablos-crud/03-03-SUMMARY.md`
+- Commits (03-03): 6f167e2 (detail/edit/delete templates), ab6937c (handlers + router + all 10 TABLO tests green), b5fa318 (checkpoint approved)
+- **Phase 3 complete** — All 3 plans done; TABLO-01..06 closed; 10/10 TABLO tests green; full browser verify passed 2026-05-15
 
 ---
-*Last updated: 2026-05-15 after Phase 3 Plan 02 fully complete (Task 3 checkpoint approved)*
+*Last updated: 2026-05-15 after Phase 3 fully complete (Plan 03, Task 3 checkpoint approved)*