diff --git a/flotilla-core/0004/SESSION-0004.0-TRANSCRIPT-2026-06-07T22-20--INPROGRESS.md b/flotilla-core/0004/SESSION-0004.0-TRANSCRIPT-2026-06-07T22-20--INPROGRESS.md
new file mode 100644
index 0000000..f86a341
--- /dev/null
+++ b/flotilla-core/0004/SESSION-0004.0-TRANSCRIPT-2026-06-07T22-20--INPROGRESS.md
@@ -0,0 +1,44 @@
+# Session 0004.0 — Transcript
+
+> App: flotilla-core
+> Start: 2026-06-07T22-20 (PST)
+> Type: planning-and-executing
+> Status: **PLACEHOLDER — claimed at session start; finalized at session end.**
+>
+> This file reserves session ID 0004 for flotilla-core. The driver replaces this
+> body with the full transcript and renames the file to its final
+> SESSION-0004.0-TRANSCRIPT-2026-06-07T22-20--<end>.md form at session end.
+
+## Launch prompt
+
+```
+Build deploy-time + retroactive provisioning of the Patchwatch label set across all
+deployments, integrated with the config-onboarding model. Tracked as flotilla-core issue #10.
+
+PROBLEM: `patchwatch sync` files issues with patchwatch/lane/sev labels, but the
+least-privilege GITEA_ISSUE_TOKEN (0.11.0) cannot create labels (soft-fails 422). On repos
+whose labels were never created, capture files UNLABELED issues -> breaks dedup-on-resync and
+surfacing. Bit the first sweep on ben.stull/rfc-app (#36-#40 filed unlabeled).
+
+DESIRED: Label provisioning is the DEPLOY identity's job (GITEA_BOT_TOKEN, repo write), keeping
+capture least-privilege:
+1. gitea.py idempotent label APIs (list_labels + create_label/ensure_label) + faked-API tests
+2. single taxonomy source derived from patchwatch.issue_labels (patchwatch, patchwatch/lane:*, sev:*)
+3. ensure-labels over repos findings ROUTE to (issue_target routing: app_source_repo,
+   wiggleverse/flotilla-core, app main repo for os-layer); idempotent; GITEA_BOT_TOKEN
+4. config-onboarding integration: doctor REPORTS missing labels + fix/heal path that CREATES them
+5. run at DEPLOY time (idempotent, non-fatal)
+6. RETROACTIVE --all sweep across every registered deployment; backfill rfc-app
+7. GRACEFUL DEGRADATION where deploy identity lacks repo-admin (ben.stull/*): report, don't fail
+
+DISCIPLINE: docs-lead-automation (SPEC §4 + §12.5 + design doc first), TDD vs faked Gitea API,
+SemVer minor bump + CHANGELOG, branch->PR->merge. Consider capture dedup by body marker
+(belt-and-suspenders) so correctness no longer DEPENDS on the label.
+
+```
+
+## Deferred decisions
+
+_Autonomous-mode low-confidence calls the driver made and would have
+liked operator input on. Appended as the session runs; surfaced at
+finalize. Empty if none._
diff --git a/flotilla-core/sessions.json b/flotilla-core/sessions.json
index 9c427e6..39092c0 100644
--- a/flotilla-core/sessions.json
+++ b/flotilla-core/sessions.json
@@ -7,5 +7,8 @@
   },
   "0003": {
     "title": ""
+  },
+  "0004": {
+    "title": ""
   }
 }