diff --git a/TODO.md b/TODO.md
index 07669eb..6d49eac 100644
--- a/TODO.md
+++ b/TODO.md
@@ -18,9 +18,9 @@
 ---
 ## Summary
 
-_Last updated: 2026-05-10 (post Sprint 7: §1.6/§3.2 done, test plan created)_
+_Last updated: 2026-05-10 (post Sprint 8: §3.3 e2e PASS — 34s/25.7% faster, §6.6 Git+7-Zip)_
 
-**Stato generale**: §1, §2, §4, §5 chiusi (4 sezioni). §3 perf: 3/6 done. Threat model, 7-Zip, test plan, type hints, JSONL logs, disk alert, runbook completati. Security deferred. Prossimi: test plan exec, §6.6 (toolchain), §3.3/3.4.
+**Stato generale**: §1, §2, §4, §5 chiusi. §3 perf: 4/6 done (3.1/3.2/3.3/3.6; 3.4/3.5 deferred). §3.3 e2e validato: -UseGitClone 34s più veloce del baseline. §6.6 Tier-1 (Git+7-Zip) installato nel template. Prossimi: test plan completo, §6.6 Tier-2.
 
 | Stato | Area                            | Done | Open | Note                                                          |
 | ----- | ------------------------------- | ---: | ---: | ------------------------------------------------------------- |
@@ -31,21 +31,20 @@ _Last updated: 2026-05-10 (post Sprint 7: §1.6/§3.2 done, test plan created)_
 | [ ]   | Gitea Workflow Integration      |    4 |    1 | manca solo §P3 generalizzazione workflow                      |
 | [x]   | §1 Sicurezza & hardening        |    3 |    0 | 1.1, 1.4, 1.6 done; 1.2/1.3/1.5/1.7/1.8 deferred (home lab)   |
 | [x]   | §2 Affidabilità & resilienza    |    7 |    0 | tutto done (2.1-2.7)                                          |
-| [ ]   | §3 Performance & throughput     |    4 |    1 | 3.1/3.2/3.3/3.6 done; 3.5/3.4 deferred (home lab optimization)       |
+| [x]   | §3 Performance & throughput     |    4 |    0 | 3.1/3.2/3.3/3.6 done; 3.4/3.5 deferred — **§3 CHIUSO**       |
 | [x]   | §4 Osservabilità & manutenzione |    3 |    0 | 4.1/4.3/4.4 done (4.2 Prometheus, 4.5 Dashboard rimossi)      |
 | [x]   | §5 Qualità codice & test        |    5 |    0 | 5.1/5.2/5.3/5.4/5.5 done                                      |
-| [ ]   | §6 Scalabilità & estensioni     |    1 |    5 | 6.6 (Git+7-Zip) done; 6.1 (Linux), 6.2-6.5 (estensioni) TODO   |
+| [ ]   | §6 Scalabilità & estensioni     |    1 |    5 | 6.6 Tier-1 (Git+7-Zip) done; 6.1 (Linux), 6.2-6.5 TODO       |
 | [ ]   | §7 Refactor Deploy ↔ Setup      |    4 |    1 | 7.1/7.2/7.3/7.4 done; 7.5 (rinomina) opzionale                |
-| [ ]   | In-VM Git Clone (§3.3)          |    0 |    4 | dipende da §6.6 (Git+7-Zip nel template)                      |
+| [x]   | In-VM Git Clone (§3.3)          |    4 |    0 | COMPLETATO 2026-05-10 — e2e PASS: 34s/25.7% vs baseline      |
 | [ ]   | Linux Build VM (§6.1)           |    0 |    4 | bozza in `docs/LINUX-TEMPLATE-SETUP.md`                       |
 
 **Prossimi passi consigliati** (vedi anche "Suggerimento di sequencing" in fondo):
-1. **E2E Test §3.3** — eseguire `scripts/Test-E2E-Section3.3.ps1` (nsis-plugin-nsinnounp con `-UseGitClone` flag)
-2. **Test Plan** — eseguire completo `docs/TEST-PLAN-v1.3-to-HEAD.md` (25+ Pester tests, validazione features)
-3. **§6.6 expansion** — Toolchain Tier-2 (PowerShell 7, NSIS, CMake, Node.js, WiX, gh, Sysinternals, vcpkg)
-4. **Security** — Rifiori se condizioni cambiano; vedi sezione "Deferred (Home Lab)"
-5. **§3.5** — vCPU/RAM tuning per workload (P2, deferred — home lab optimization)
-6. **§3.4** — Pre-warm pool di cloni (P3, deferred — profiling-dependent optimization)
+1. **Test Plan** — eseguire completo `docs/TEST-PLAN-v1.3-to-HEAD.md` (25+ Pester tests, validazione features)
+2. **§6.6 expansion** — Toolchain Tier-2 (PowerShell 7, NSIS, CMake, Node.js, WiX, gh, Sysinternals, vcpkg)
+3. **Security** — Rifiori se condizioni cambiano; vedi sezione "Deferred (Home Lab)"
+4. **§3.5** — vCPU/RAM tuning per workload (P2, deferred — home lab optimization)
+5. **§3.4** — Pre-warm pool di cloni (P3, deferred — profiling-dependent optimization)
 
 ---
 ## Setup & Infrastructure