diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 21d6b56..b2a03cf 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -87,7 +87,7 @@
 | task | CSOC-WP-0011-T02 | todo | — | workplans/CSOC-WP-0011-ui-framework-architecture.md |
 | task | CSOC-WP-0011-T03 | todo | — | workplans/CSOC-WP-0011-ui-framework-architecture.md |
 | task | CSOC-WP-0012-T01 | progress | — | workplans/CSOC-WP-0012-durable-recovery-service-readiness.md |
-| task | CSOC-WP-0012-T02 | todo | — | workplans/CSOC-WP-0012-durable-recovery-service-readiness.md |
+| task | CSOC-WP-0012-T02 | done | — | workplans/CSOC-WP-0012-durable-recovery-service-readiness.md |
 | task | CSOC-WP-0012-T03 | todo | — | workplans/CSOC-WP-0012-durable-recovery-service-readiness.md |
 | task | CSOC-WP-0013-T01 | progress | — | workplans/CSOC-WP-0013-sharing-content-hardening.md |
 | task | CSOC-WP-0013-T02 | progress | — | workplans/CSOC-WP-0013-sharing-content-hardening.md |
diff --git a/docs/release/paired-backup-operations-2026-10-07.md b/docs/release/paired-backup-operations-2026-10-07.md
index b5ccd32..3748c84 100644
--- a/docs/release/paired-backup-operations-2026-10-07.md
+++ b/docs/release/paired-backup-operations-2026-10-07.md
@@ -227,3 +227,10 @@ the exact retained image ID; verify-restored-application.py accepts --kit-manife
 to bind both image IDs to that captured point. This avoids depending on registry
 availability or preexisting image tags. The public platform contract records the
 protected kit key/version/hash and exact last recovered primary point.
+
+Current validation after offline image binding: make check passes246tests and
+the mandatory browser registry gate. Platform's70targeted synthetic cases cover
+identity/custody isolation, multipart mirror retries, kit corruption/path refusal,
+nonexpiring publication and independent proof retention. Those synthetic results
+supplement the native recovery receipt; they do not replace its application/data
+checks or the still-open service and productive user verdicts.