diff --git a/docs/evidence/2026-09-15-repository-rename-handoffs.md b/docs/evidence/2026-09-15-repository-rename-handoffs.md
index f795b46..de6a05f 100644
--- a/docs/evidence/2026-09-15-repository-rename-handoffs.md
+++ b/docs/evidence/2026-09-15-repository-rename-handoffs.md
@@ -17,14 +17,19 @@ Shared identity for every request:
 | --- | --- | --- | --- |
 | `railiance-fabric` | fabric-projection | Update `registry/local-repos.yaml`, `registry/railiance-repos.yaml`, live `fabric/**` `repo: flex-auth`; re-ingest; keep `flex-auth.*` runtime graph IDs | pending |
 | `ops-warden` | credential-route | Review `registry/routing/catalog.yaml` owner repository field; routing must still resolve; no secret in the reply | pending |
-| `reuse-surface` | other | Update federation source URL/path, re-ingest, verify capability continuity | `REUSE-WP-0023` / `65c03b24-4349-5a60-b7d6-79cf54931d06` |
-| `policy-nexus` | other | Update `source-inventory.config.json` remote URL; re-ingest same publication lineage | `PNEX-IN-0001` / `01a0f266-ecb3-7f5d-b8e8-8db1ba2b5199` |
+| `reuse-surface` | other | Update federation source URL/path, re-ingest, verify capability continuity | `REUSE-WP-0023` / `65c03b24-4349-5a60-b7d6-79cf54931d06` (active; T01/T02 wait) |
+| `policy-nexus` | other | Update `source-inventory.config.json` remote URL; re-ingest same publication lineage | `PNEX-IN-0001` / `01a0f266-ecb3-7f5d-b8e8-8db1ba2b5199` (open) |
 | `user-engine` | documentation | Update `wiki/ArchitectureBlueprint.md` absolute source path; adapter/runtime vocabulary stays `flex-auth` | pending |
 | `net-kingdom` | deployment | Verify three live `flex-auth-*` Deployments and `sso-mfa/k8s/**`; no runtime rename | pending |
-| `tenant-engine` | consumer | Verify docs/client config keep the retained product/runtime contract | `TEN-IN-0004` / intake `01a0c14b-b2f7-78f1-8f6c-e36c952fe004` |
-| `sbom-nexus` | sbom | Re-ingest new canonical checkout; snapshots remain related to the UUID above | `SBOM-IN-0001` / `01a0f267-b25a-7681-8d41-9627aa0b78ce` |
-| `repo-manager` | other | Reconcile new canonical path; do not rewrite archived UUID-migration evidence | `RMGR-IN-0004` / `01a0f268-335d-7db0-b630-a4b451c73fde` |
-| `railiance-platform`, `markitect-tool`, `gate-house`, `approval-engine`, `secrets-engine`, `zone-engine` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | pending |
+| `tenant-engine` | consumer | Verify docs/client config keep the retained product/runtime contract | `TEN-IN-0004` / intake `01a0c14b-b2f7-78f1-8f6c-e36c952fe004` (open) |
+| `sbom-nexus` | sbom | Re-ingest new canonical checkout; snapshots remain related to the UUID above | `SBOM-IN-0001` / `01a0f267-b25a-7681-8d41-9627aa0b78ce` (open) |
+| `repo-manager` | other | Reconcile new canonical path; do not rewrite archived UUID-migration evidence | `RMGR-IN-0004` / `01a0f268-335d-7db0-b630-a4b451c73fde` (open) |
+| `railiance-platform` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `RPF-IN-0001` / `01a0f26d-0c87-791e-8cc6-8d09cd794160` (open) |
+| `markitect-tool` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `MKTT-IN-0001` / `01a0f26d-8344-78a5-b4fd-5db80c1c7a3a` (open) |
+| `gate-house` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `GH-IN-0005` / `01a0f26d-da02-7257-96a1-bca198859769` (open) |
+| `approval-engine` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `APPROVAL-IN-0003` / `01a0f26c-a0d0-7ad2-a8e2-c9de59c5aabb` (open) |
+| `secrets-engine` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `SECRETS-IN-0002` / `01a0c279-538e-7d99-bf69-f4c67a8d3eda` (open) |
+| `zone-engine` | consumer | Confirm no live repository URL/path remains; retain product/runtime terminology | `ZONE-IN-0002` / `01a0f26d-1083-7dc7-98da-a85c770676d8` (open) |
 | `flex-auth` + Forgejo operator | ci / package | `.forgejo/workflows/image.yaml`, charts, deploy, releases, packages, hooks, Actions, deploy keys, branch protection, redirects, clone URLs. Only repository coordinates change. Image name stays `coulomb/flex-auth`. | this plan |
 
 Request message IDs (not owner work-records):