diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index afa53a0..f325410 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -28,7 +28,7 @@
 | workplan | FLEX-WP-0018 | finished | — | workplans/FLEX-WP-0018-inbound-auth-corrections.md |
 | workplan | FLEX-WP-0019 | finished | — | workplans/FLEX-WP-0019-layer-model-conformance.md |
 | workplan | FLEX-WP-0020 | proposed | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
-| workplan | FLEX-WP-0021 | proposed | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
+| workplan | FLEX-WP-0021 | active | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0001-T001 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
 | task | FLEX-WP-0001-T002 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
 | task | FLEX-WP-0001-T003 | done | — | workplans/FLEX-WP-0001-repo-intent-and-architecture-baseline.md |
@@ -127,8 +127,8 @@
 | task | FLEX-WP-0020-T09 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
 | task | FLEX-WP-0020-T10 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
 | task | FLEX-WP-0020-T11 | wait | — | workplans/FLEX-WP-0020-repository-identity-migration.md |
-| task | FLEX-WP-0021-T01 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
-| task | FLEX-WP-0021-T02 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
+| task | FLEX-WP-0021-T01 | done | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
+| task | FLEX-WP-0021-T02 | done | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T03 | todo | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T04 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |
 | task | FLEX-WP-0021-T05 | wait | — | workplans/FLEX-WP-0021-secrets-engine-consumer-policy-gate.md |