diff --git a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md
index d6fc119..9fc75a6 100644
--- a/workplans/EMAIL-WP-0007-ledger-backup-recovery.md
+++ b/workplans/EMAIL-WP-0007-ledger-backup-recovery.md
@@ -127,9 +127,9 @@ monitoring stay waiting. CSOC-WP-0015-T03 is the product acceptance follow-up.
 ## Pair-custody preview — 2026-10-08
 
 Founder admitted `backup-pair-writer` on 2026-10-08. The OpenBao policy is
-installed and matches its source file. Both backup-primary KV paths are still
-absent: the bootstrap key cannot create IAM applications (403), and the live
-bucket policy still allows only the existing resource-control application
-under `platform-pg/*`. No Scaleway key, primary.env, receiver pause, upload
-or timer. T03/T04 stay wait. Review:
+installed and matches its source file. Version 1 of both backup-primary KV paths now exists, with both field names
+set to a non-credential placeholder. The founder will enter the real pairs
+as a new OpenBao UI version. The live bucket policy still allows only the
+existing resource-control application under `platform-pg/*`. No real Scaleway
+key, primary.env, receiver pause, upload or timer. T03/T04 stay wait. Review:
 railiance-platform/docs/credential-lane-designs/application-backup-pair-custody-2026-10-08.md.