diff --git a/decisions/decisions.md b/decisions/decisions.md
index 72fe607..94e420c 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -257,7 +257,7 @@ missing, which is worse.
 id: GH-DEC-2026-003
 kind: decision
 title: The PEP consumes an approval before the protected side effect
-status: open
+status: resolved
 owner: Bernd Worsch
 repo: gate-house
 standard: net-kingdom/canon/standards/security-layer-model_v0.7.md
@@ -273,7 +273,13 @@ affects:
 - secrets-engine
 - ops-warden
 created: '2026-08-29T12:50:06.944092Z'
-updated: '2026-08-29T12:50:06.944092Z'
+updated: '2026-08-29T12:51:01.355583Z'
+rationale: Approved as GH-WP-0002-T06. The PEP consumes by compare-and-swap before
+  the protected side effect; the PDP never mutates; there is no unconsume. Same request
+  digest is idempotent success; a different digest against a consumed object is conflict.
+  This closes the three named races and unblocks APPROVAL-WP-0001-T05 and FLEX-WP-0017-T05.
+decided_by: Bernd Worsch
+decided_at: '2026-08-29T12:51:01.355583Z'
 ```
 
 ## Context