diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index de75670..9234f97 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -21,4 +21,4 @@
 | task | CSOC-WP-0002-T05 | done | — | workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md |
 | task | CSOC-WP-0002-T06 | done | — | workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md |
 | task | CSOC-WP-0002-T07 | done | — | workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md |
-| task | CSOC-WP-0002-T08 | progress | — | workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md |
+| task | CSOC-WP-0002-T08 | done | — | workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md |
diff --git a/workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md b/workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md
index 640d141..8b6304d 100644
--- a/workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md
+++ b/workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md
@@ -250,7 +250,7 @@ docs record system id and vocabulary.
 
 ```task
 id: CSOC-WP-0002-T08
-status: progress
+status: done
 priority: medium
 state_hub_task_id: "4718f21c-d509-45b9-a8f5-31de2099fd3f"
 ```
@@ -266,7 +266,7 @@ Align with business-app delivery lane without full production cutover:
 **Done when:** image builds in CI or documented local script; deploy notes in
 `docs/deploy.md`.
 
-2026-08-09: `Dockerfile` added; `railiance-apps` chart + values + ingress stub + Makefile targets. Image publish and env Secret still operator steps.
+2026-08-09: `Dockerfile` added; `railiance-apps` chart + values + ingress stub + Makefile targets. Image `7067145` published and Helm release deployed; migrations applied; in-cluster /healthz+landing OK. Public DNS still Cloudflare/Bubble; TLS cert pending DNS cutover to 92.205.62.239.
 
 ---