docs(AUDIT-WP-0008): record recovery owner approval

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de

workplans/AUDIT-WP-0008-tenancy-posture-alignment.md

@@ -441,6 +441,13 @@ Whitehat commit `32afceb` on 2026-08-22T10:04:56Z. It validates for the approved
 attended cleanup are now the remaining pre-run gate, routed in
 `2cf6752a-c186-44a7-9d5f-2319a2ea68a2`; no credential exists yet.
 
+Railiance-platform delivered the mount-only projection/reload/cleanup procedure
+at `f04c801` and reported its value-safe preflight clean. The procedure remains
+held for the attended 2026-08-22 18:00–18:15Z window: no bearer has been minted,
+no runner pod has been applied, and the pre-window engagement gate still fails
+closed. This is readiness evidence only; T05 remains in progress until the
+bounded run and sanitized report complete.
+
 ```task
 id: AUDIT-WP-0008-T06
 status: done
@@ -503,6 +510,15 @@ One thing the enumeration settled: **V2 is not reachable from P1 as built.**
 synchronous providers — so no amount of replication on our Deployment raises it.
 V1 is the ceiling here, not merely the next step.
 
+Audit-core approved the final hash-bound `RAILIANCE-WP-0024` T02/T03 recovery
+procedure contract at digest
+`f86d418f951f829f075de04dd825c6e2e185e577019ee23d6da1fa9040302d62` on
+2026-08-22. Receipt `0c0e3dff-c7fd-4fac-898b-1aec160f4753` records that all
+four pinned artifacts matched and the focused tests plus both value-safe,
+read-only preflights passed. Both preflights remain
+`ready_for_live_execution: false`: this approves the procedure only and does
+not authorize a lease revocation, restart, or reboot window.
+
 ```task
 id: AUDIT-WP-0008-T08
 status: done