diff --git a/displays/src/headless/codex/prompt.rs b/displays/src/headless/codex/prompt.rs
index 6da2d06c..332aa88c 100644
--- a/displays/src/headless/codex/prompt.rs
+++ b/displays/src/headless/codex/prompt.rs
@@ -111,9 +111,13 @@ const WORK_TYPE_PLAYBOOK: &str = "WORK TYPE — READ THE ORDER FIRST\n\
        crashing) means diagnose that fault. When the note is ambiguous, ask the technician which.\n\
      - A new computer the shop sold is a QC: its task is in QC, or the notes on the order or its task \
        ask to set up the new machine, move the customer's data from the old one or install their \
-       software. Load the qc-new-computer skill with read_skill and follow it instead of the tune-up \
-       pass; if it cannot be loaded, run the tune-up pass without the scans and do what the notes ask. \
-       QCs never get the Webroot or SuperAntiSpyware scans.\n\
+       software. The customer is waiting on a QC, so finish it fast. Load the qc-new-computer skill \
+       with read_skill and follow its order instead of the tune-up pass. If it cannot be loaded, \
+       start the data transfer, install-windows-updates and the driver installs together, then run \
+       activate-cps, disable-notifications, activate-seb when the order includes it and \
+       disable-startup-apps, then do what the notes ask. QCs never get the Webroot or \
+       SuperAntiSpyware scans. They get QC Benchmark, Memory Test or stress tests only when the \
+       technician asks, after everything else.\n\
      - Keep a visible plan: call `update_plan` with your intended steps as soon as you know the \
        work type, mark each step in_progress when you start it and completed when it lands, and \
        revise it as findings change. The technician watches this checklist.\n\
@@ -481,10 +485,11 @@ mod tests {
     }
 
     #[test]
-    fn qcs_follow_the_qc_skill_and_skip_the_scans() {
+    fn qcs_follow_the_qc_skill_and_skip_scans_and_unrequested_tests() {
         let text = developer_instructions(&cfg(), &thread(Some("2141021")), &[], &[], false, None, &[]);
-        assert!(text.contains("Load the qc-new-computer skill with read_skill"), "{text}");
+        assert!(text.contains("Load the qc-new-computer skill"), "{text}");
         assert!(text.contains("QCs never get the Webroot or SuperAntiSpyware scans"), "{text}");
+        assert!(text.contains("only when the technician asks, after everything else"), "{text}");
         assert!(text.contains("Scans (tune-ups only)"), "{text}");
     }
 }
diff --git a/displays/src/plugins/mcp_bridge.rs b/displays/src/plugins/mcp_bridge.rs
index 0530a21f..8f53b9c7 100644
--- a/displays/src/plugins/mcp_bridge.rs
+++ b/displays/src/plugins/mcp_bridge.rs
@@ -12439,30 +12439,33 @@ Scripts Tab Navigation section below). Activation scripts (Webroot, SAS, SEB) RE
 service number to be entered in the Scripts tab field before clicking Run, otherwise they
 short-circuit with "requires SO number" in the log.
 
-Always run, in this order (Tuneup / QC checklist column unless noted):
-   1. Run Prechecks                  (Informational column — connects Wi-Fi, aligns taskbar, scans network)
-   2. Install Windows Updates        (may require multiple reboots; re-check after each cycle until clean)
+The customer is waiting on a QC, so turnaround comes first: start the long jobs together and
+never leave the machine idle. Run in this order (Tuneup / QC checklist column unless noted):
+   1. Data Transfer                  (when the notes mention a transfer, an old drive or a trade-in;
+                                      start it first, then map UsersBackup into the new profile)
+   2. Install Windows Updates        (alongside the transfer, with the driver installs; may require
+                                      multiple reboots; re-check after each cycle until clean)
    3. Activate Webroot               (needs SO number → CPS keys)
    4. Activate SuperAnti + Change SuperAntiSpyware settings
                                      (CHECK BOTH in the same Run; the tab detects the combo and
                                       runs them as one sequential install→configure flow)
-   5. Activate SEB                   (needs SO number AND customer email)
-   6. Disable Sleep / Hibernation
-   7. Disable Startup Apps
-   8. Disable Notifications
-   9. Unpin Copilot
-  10. Align Taskbar to left
-  11. Change Timezone to Mountain
-  12. Disable proxy settings
-  13. Disable OneDrive Startup       (Junkware Removal column)
-  14. Disable Edge Startup Boost     (Junkware Removal column)
+   5. Disable Notifications
+   6. Turn on automatic updates      (Settings > Windows Update: nothing paused or turned off by policy)
+   7. Activate SEB                   (when the order includes it; needs SO number AND customer email)
+   8. Disable Startup Apps, Disable OneDrive Startup and Disable Edge Startup Boost (the last two
+      in the Junkware Removal column), and turn off the Windows Security notification icon in
+      Task Manager > Startup apps
+   9. Disable Sleep / Hibernation, Unpin Copilot, Align Taskbar to left, Change Timezone to
+      Mountain
+  10. What the task and customer notes ask for (software, keys, specific steps)
+  11. Run Prechecks                  (Informational column) as the final check; run it first only
+                                     when the machine has no network yet, since it connects Wi-Fi
 No Webroot or SuperAntiSpyware scans on a QC: the install is new, and transferred user data
-gets a PUP check instead when something in it looks off. ZeroClaw's qc-new-computer skill
-holds the full QC playbook: data transfer and mapping, software, drivers and tests.
+gets a PUP check instead when something in it looks off. QC Benchmark, Memory Test and stress
+tests run only when the technician asks, after everything else. ZeroClaw's qc-new-computer skill
+holds the full QC playbook: data transfer and mapping, software and drivers.
 
 Conditional, gated on task description / checkin_notes (see Service Context Identification Step 4):
-  - Data Transfer                    — only when notes mention transfer / old drive / migration;
-                                       then map UsersBackup into the new profile
   - Install LibreOffice              — only when explicitly requested
   - Disable BitLocker                — only if Informational shows BitLocker enabled
   - Run Junkware Category            — when prechecks/Informational flag PUPs, or notes name them
@@ -12752,6 +12755,9 @@ Workflow integration (customer QC / New Computer build on a REMOTE client):
   Updates, Disable OneDrive Startup, etc.
 - For multi-script combos like Activate SuperAnti + Change SuperAntiSpyware settings,
   run as two back-to-back scripts_run_remote calls.
+- One catalog script runs at a time per client; RemoteExec jobs and plugin calls run alongside
+  it. Keep the data transfer and driver installs going as RemoteExec jobs while Install Windows
+  Updates runs, and run the quick setup scripts between update passes.
 - Activation scripts require service_number; SEB also requires customer_email.
 - Always call remote_egui_list_targets first to confirm the client is connected.