diff --git a/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md b/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
index 2a8ec53..4a127a3 100644
--- a/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
+++ b/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Authorize railiance-platform credential-grant requests"
 domain: infotech
 repo: flex-auth
-status: proposed
+status: active
 owner: codex
 topic_slug: netkingdom
 planning_priority: P3
@@ -12,7 +12,7 @@ planning_order: 120
 related_workplans:
   - RAILIANCE-WP-0005
 created: "2026-08-11"
-updated: "2026-08-11"
+updated: "2026-08-23"
 state_hub_workstream_id: "89ecdb1f-ceb0-4a50-b72d-c3dfd5fa7c73"
 ---
 
@@ -84,7 +84,7 @@ What is *actually* missing is narrower and worth stating precisely:
 
 ```task
 id: FLEX-WP-0012-T01
-status: todo
+status: progress
 priority: medium
 state_hub_task_id: "a1c9ba0c-3413-4823-9f9e-ccee09cf5d74"
 ```
@@ -122,6 +122,11 @@ Done when the decision is recorded, and railiance-platform has agreed to it —
 this one cannot be decided unilaterally, because either option changes
 something they own.
 
+Progress 2026-08-23: revalidated both repositories. The helper still emits the
+flat payload and defaults to `/credential-grants/authorize`; flex-auth still
+serves only `/v1/check`. The translation choice is therefore current, not stale.
+Request railiance-platform agreement before implementing either wire shape.
+
 ## T02 - Credential-grant policy package and fixtures
 
 ```task