diff --git a/.claude/sweep-security-state.json b/.claude/sweep-security-state.json
index f78f79e1..fe215701 100644
--- a/.claude/sweep-security-state.json
+++ b/.claude/sweep-security-state.json
@@ -13,6 +13,12 @@
       "severity_max": "HIGH",
       "categories_found": [1, 4],
       "notes": "Follow-up #1220: GPU predictor=2 kernel over-indexed d_decomp for multi-sample tiled TIFFs (silent OOB GPU write). Fixed by passing width=tile_width instead of tile_width*samples."
+    },
+    "hydro": {
+      "last_inspected": "2026-04-17",
+      "issue": null,
+      "severity_max": "MEDIUM",
+      "categories_found": [1, 3, 6]
     }
   }
 }