diff --git a/docs/roadmap.md b/docs/roadmap.md
index 50d9bf8..b318f57 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -208,20 +208,23 @@ Each phase keeps the system working and is its own spec → plan → build cycle
   User management likewise consumes the existing better-auth `/api/auth/admin/*` endpoints, and the
   live view + reports consume `/api/admin/sessions[/active]`. _Done when:_ an admin can see who's
   working now, manage users **and activities**, and hand-correct a session.
-- **Phase 4 — Workbench scanning.** QR at the bench → select workbench/activity, with
-  manual selection fallback. _Done when:_ scanning a bench QR pre-fills the session.
+- **Phase 4 — Workbench scanning.** ✅ **Descoped / done (2026-07-22).** The product owner
+  confirmed the QR is just a printed code that opens the app URL — produced by an external
+  QR tool, no in-app camera scan, no `workbenches` entity, no session pre-fill. The existing
+  manual picker (Type zool → handeling → aantal zolen) already starts the session. Nothing to
+  build in this repo; the `workbenches` table/`workbench_id` sketched in §7 is not implemented.
 - **Phase 5 — Polish & deploy.** Reporting niceties, dependency slimming, push the
   container to a chosen cloud host.
 
 ## 10. Open questions & assumptions (confirm as we go)
 
-- **Scanning = QR codes** on benches, read by the phone camera (no special hardware),
-  always with manual fallback. _(Assumption.)_
+- **Scanning = QR codes** — ✅ resolved (2026-07-22): the QR only opens the app URL (external
+  tool), not an in-app camera scan. See Phase 4.
 - **Start fresh, no data migration.** Assumes no live workshop data/users worth
   preserving in the friend's platform instance. If there are, they must be **exported
   from the friend's Create account** — unreachable from this repo.
-- **Workbench↔activity mapping** is hardcoded/seeded for now; real mapping TBD with the
-  friend.
+- **Workbench↔activity mapping** — ✅ moot (2026-07-22): no workbench entity is built (Phase 4
+  descoped).
 - **Deployment host** is deferred (Phase 5); the dockerized stack keeps options open.
 - **Domain term:** "insole" / orthotic; Dutch UI (`Type zool`, `handeling`, `aantal
 zolen`, etc.).