diff --git a/.paul/ROADMAP.md b/.paul/ROADMAP.md
index eafbaf6..3f4e05f 100644
--- a/.paul/ROADMAP.md
+++ b/.paul/ROADMAP.md
@@ -156,4 +156,29 @@ Completed: 2026-05-18
 - [x] 12-01: README complete CLI reference + error codes table
 
 ---
-*Roadmap updated: 2026-05-18 — v0.3 complete.*
+
+## Milestone v0.4 — Robustness 🚧
+
+**Status:** In Progress
+**Phases:** 0 of 2 complete
+**Focus:** Fix high-impact stability issues identified in codebase analysis — null guards, resource disposal, network timeout, and test infrastructure hardening.
+
+| Phase | Name | Plans | Status | Completed |
+|-------|------|-------|--------|-----------|
+| 13 | robustness-fixes | TBD | Not started | - |
+| 14 | test-hardening | TBD | Not started | - |
+
+### Phase 13: robustness-fixes
+
+**Goal:** Fix ISS-001, ISS-005, ISS-006 — null guard on MachineFingerprint WMI properties, dispose SHA256CryptoServiceProvider, fix Lsv2Client connect timeout to actually abort hung task.
+**Issues addressed:** ISS-001, ISS-005, ISS-006
+**Plans:** TBD (defined during /paul:plan)
+
+### Phase 14: test-hardening
+
+**Goal:** Fix ISS-007, ISS-008 — make integration test IPs configurable via environment variables, add unit tests for MachineFingerprint (mock IMachineFingerprint) and LicenseFile edge cases.
+**Issues addressed:** ISS-007, ISS-008
+**Plans:** TBD (defined during /paul:plan)
+
+---
+*Roadmap updated: 2026-05-18 — v0.4 milestone created.*
diff --git a/.paul/STATE.md b/.paul/STATE.md
index f5910e6..2615729 100644
--- a/.paul/STATE.md
+++ b/.paul/STATE.md
@@ -9,24 +9,23 @@ See: .paul/PROJECT.md (updated 2026-05-18)
 
 ## Current Position
 
-Milestone: v0.3 Code Quality — **COMPLETE**
-Phase: 12 of 12 (docs-cli) — Complete
-Plan: 12-01 complete
-Status: All milestones complete
-Last activity: 2026-05-18 — Phase 12 (docs-cli) complete
+Milestone: v0.4 Robustness — **In Progress**
+Phase: 13 of 14 (robustness-fixes) — Not started
+Plan: Not started
+Status: Ready to plan
+Last activity: 2026-05-18 — Milestone v0.4 created
 
 Progress:
 - Milestone v0.1: [██████████] 100% (complete)
 - Milestone v0.2: [██████████] 100% (complete)
 - Milestone v0.3: [██████████] 100% (complete)
-- Phase 11 (refactor): [██████████] 100% (complete)
-- Phase 12 (docs-cli): [██████████] 100% (complete)
+- Milestone v0.4: [░░░░░░░░░░] 0%
 
 ## Loop Position
 
 ```
 PLAN ──▶ APPLY ──▶ UNIFY
-  ✓        ✓        ✓     [Phase 12 complete — v0.3 milestone complete]
+  ○        ○        ○     [Ready for Phase 13 PLAN]
 ```
 
 ## What Was Built (v0.3 Code Quality — complete)
@@ -136,11 +135,16 @@ PLAN ──▶ APPLY ──▶ UNIFY
 - `#` = Warning in Fanuc/Mitsubishi — macro variable indicator
 
 ### Deferred Issues
-- Heidenhain: `ReadActiveProgramAsync` / `SelectMainProgram` not implemented
-- Siemens: same as Heidenhain
-- Build + integration not verifiable on Linux (fwlib32 Windows-only)
-- MachineFingerprint WMI + full license flow — needs real Windows hardware test
-- `private.key.xml` owned by root — run `sudo chown $USER ~/Documents/mine/c#/LicenseGenerator/private.key.xml`
+Formalized to `.paul/ISSUES.md` (2026-05-18) — 11 tracked issues (ISS-001 to ISS-011).
+
+Key open items:
+- ISS-001: MachineFingerprint null dereference — High, Quick fix
+- ISS-002: Blocking .GetAwaiter().GetResult() — Medium, refactor
+- ISS-003: Silent catch {} blocks — High, needs logging (ISS-004)
+- ISS-004: No logging framework — Medium, Substantial effort
+- ISS-008: MachineFingerprint untested on real Windows hardware — High
+- ISS-009/010: Heidenhain/Siemens ReadActiveProgram not implemented — deferred
+- `private.key.xml` owned by root (external repo) — run `sudo chown $USER ~/Documents/mine/c#/LicenseGenerator/private.key.xml`
 
 ### Blockers/Concerns
 None — all milestones complete.
@@ -150,11 +154,16 @@ Last commit: `bd17ea4` — feat(11-refactor): extract ArgParser, fix error handl
 LicenseGenerator repo: commit `2ef68dd` — feat: initial LicenseGenerator
 Branch: main (pushed)
 
+## Codebase Mapped
+
+Date: 2026-05-18
+Documents: `.paul/codebase/` (7 files — STACK, ARCHITECTURE, STRUCTURE, CONVENTIONS, TESTING, INTEGRATIONS, CONCERNS)
+
 ## Session Continuity
 
 Last session: 2026-05-18
-Stopped at: v0.3 complete — all phases done
-Next action: No planned phases. Start new milestone or ship.
+Stopped at: v0.4 Robustness milestone created, ready to plan Phase 13
+Next action: /paul:plan — Phase 13 (robustness-fixes): ISS-001, ISS-005, ISS-006
 Resume file: .paul/ROADMAP.md
 
 ---