diff --git a/workplans/ACTIVITY-WP-0020-weekly-forgejo-package-prune.md b/workplans/ACTIVITY-WP-0020-weekly-forgejo-package-prune.md
index 890dd0e..2ffcd11 100644
--- a/workplans/ACTIVITY-WP-0020-weekly-forgejo-package-prune.md
+++ b/workplans/ACTIVITY-WP-0020-weekly-forgejo-package-prune.md
@@ -240,7 +240,7 @@ this host. Enable/apply gated on **T07** (extend protection to live deployed tag
 
 ```task
 id: ACTIVITY-WP-0020-T07
-status: progress
+status: done
 priority: high
 state_hub_task_id: "59cd05b3-1a26-4935-9131-0e4d746cb984"
 ```
@@ -287,6 +287,16 @@ then
 — if all live tags land in protected/absent from would_delete, T07
 acceptance is met and T05 enable + T06 apply unblock.
 
+**Done 2026-07-18:** dry-run executed via the forgejo-admin-api-token
+warden lane (no PAT files): 34 candidates, 0 errors, **no live tag in
+would_delete** — state-hub main-1cf949b protected via the railiance01
+live-images export; activity-core's 19 candidates confirmed to have no
+live registry consumer. Evidence:
+`railiance-platform/docs/evidence/forgejo-package-prune-dryrun-20260718.json`.
+T05 remaining: flip `weekly-forgejo-package-prune` to enabled (rides the
+next activity-core image deploy or the external-definitions configmap)
++ runbook entry; then T06 first apply.
+
 ---
 
 ### T06 — First apply run and backup impact evidence