diff --git a/workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md b/workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
index 0b299f4..926d38b 100644
--- a/workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
+++ b/workplans/FLEX-WP-0011-railiance-staged-promotion-overlay.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Bring flex-auth under the railiance staged-promotion contract"
 domain: infotech
 repo: flex-auth
-status: active
+status: finished
 owner: codex
 topic_slug: netkingdom
 planning_priority: P2
@@ -145,7 +145,7 @@ Candidate image: `sha256:1f5290376dc5fcf456dc7a785e394d8b90949dabecd1d3e856f3855
 
 ```task
 id: FLEX-WP-0011-T03
-status: wait
+status: done
 priority: low
 state_hub_task_id: "bebd6ed9-9145-4fc0-bdc8-cac669643c62"
 ```
@@ -168,3 +168,9 @@ Raised 2026-08-16 with `the-custodian` (message
 railiance01 namespace `flex-auth` is Active (7d+); coulombcore has k3s
 but no `flex-auth` namespace and no flex-auth Deployments. Wave 7.3 has
 nothing left to drain. T03 waits on the canon edit or a decision id.
+
+Done 2026-08-16: operator authorized the canon edit. Row 23 in
+`the-custodian/docs/coulombcore-drain-placement-plan.md` now lists
+current = railiance01 `flex-auth` ns, status **on target**, owner
+`FLEX-WP-0011`. Wave step 7.3 is restated as identity-endpoint follow-up
+only; host drain is complete. Custodian commit `c377f0d`.