diff --git a/README.md b/README.md
index c79002b..61b267a 100644
--- a/README.md
+++ b/README.md
@@ -642,11 +642,12 @@ Phase 5: collections and files
 
 Phase 6: download
 
-- [ ] `downloadFile(fileID, outPath)` streams the encrypted body, decrypts it
-      chunk by chunk, writes plaintext to `outPath`. Resolves the filename from
-      the decrypted metadata title when no `outPath` is supplied.
-- [ ] `downloadThumbnail(fileID, outPath)` for the thumbnail CDN
-- [ ] Live integration test against a throwaway Ente account if one is available
+- [x] `downloadFile(api, file, outPath?)` streams encrypted body, buffers to 4
+      MiB chunk boundary, decrypts via secretstream pull, writes to disk. Falls
+      back to `metadata.title` when outPath is omitted.
+- [x] `downloadThumbnail(api, file, outPath?)` same for thumbnails
+- [x] Live integration test: logs in, decrypts collections and files, downloads
+      a real JPEG from the dev account and verifies it on disk
 
 Phase 7: session persistence