diff --git a/docs/bounded-executor-receipts.md b/docs/bounded-executor-receipts.md
index 236babb..f5a390d 100644
--- a/docs/bounded-executor-receipts.md
+++ b/docs/bounded-executor-receipts.md
@@ -225,5 +225,7 @@ on the declared ceiling.
 The executor's emitter now accepts 202 (accepted) and 200 (duplicate)
 (`clients.AuditCore.emit`), which closes the defect recorded on 2026-10-31.
 
-The new detection runs once the ConfigMap is applied with a receiver image
-built from this commit or later. Image `sha256:304cfb83` predates it.
+Released 2026-11-03: receiver `sha256:5f3d01c8…` (built from 2b8c909) and
+the scope ConfigMap carrying `closing_classes` are live on railiance01. The
+detection is inert until the `nk-bounded-executor` token is seeded and the
+executor emits.
diff --git a/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md b/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md
index af4f651..d86d514 100644
--- a/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md
+++ b/workplans/AUDIT-WP-0018-bounded-executor-receipt-custody.md
@@ -123,7 +123,11 @@ Code: `audit_core/stream_findings.py` (`evaluate_closing`) and
 `docs/stream-completeness.md`.
 
 - **Asked of NetKingdom:** put `window.not_after` in the started body.
-- **Founder-run:** release an image from this commit and apply the ConfigMap.
+- **Released 2026-11-03:** the founder applied `deploy/senders-scope.yaml`
+  and `deploy/audit-core.yaml` (image `sha256:5f3d01c8…` from 2b8c909, pinned
+  in 4fcf7c6) to railiance01. The server dry-run was clean and the rollout
+  completed. The finding stays inert until `nk-bounded-executor` has a seeded
+  token and emits.
 
 ## Founder decision 2026-10-31