diff --git a/docs/wasm-inflate-panic.md b/docs/wasm-inflate-panic.md
index ed4a056..dd91bec 100644
--- a/docs/wasm-inflate-panic.md
+++ b/docs/wasm-inflate-panic.md
@@ -434,3 +434,17 @@ normal URL: browser raw-sd test passed, open example.txt took 36.8s
 This fixes the browser panic without disabling dynamic promotion globally. The
 remaining upstream-quality improvement would be eliminating the 32-bit store-TCI
 subset entirely by finding the exact cross-width/shared-memory state bug.
+
+### E14 benchmark correction — 32-bit-only fallback rejected as default
+
+A 3-run benchmark changed the decision:
+
+| fallback | result | open times |
+| --- | --- | --- |
+| 32-bit-store-only TCI | 2 pass, 1 app-init watchdog | 34.0s, 33.8s |
+| blanket store-TCI | 3 pass | 35.3s, 36.6s, 34.3s |
+
+The narrowed fallback is a little faster when it works, but it is not reliable
+enough: one run failed before controls enabled with an interrupt watchdog. The
+default is restored to the upstream blanket store-TCI fallback. Keep the
+32-bit-only result as a useful diagnostic, not a production fix.
diff --git a/third_party/qemu b/third_party/qemu
index 59a198d..f46ca3b 160000
--- a/third_party/qemu
+++ b/third_party/qemu
@@ -1 +1 @@
-Subproject commit 59a198dcf8deb9da15a21ff39b9e42bd89c9af38
+Subproject commit f46ca3b386d384c9048d0917985031a7bbae6ac1