Record owner replies and verified policy v2 rollout

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0726e-5232-73f2-aaca-2c05ceb62efb

workplans/GLAS-WP-0012-first-local-profile-production-proof.md

@@ -303,3 +303,13 @@ project glas-local-proof must be reconciled with the owner route example's
 project glas-harness before the exact delivery binding is selected. Owner
 handoffs were sent after explicit authorization; GLAS-WP-0015 records all seven
 receipt IDs and tracks replies. This plan's T02 remains wait.
+
+## Verified owner follow-up — 2026-09-06
+
+Glas reviewed six owner acknowledgements in GLAS-WP-0015. Project binding is
+resolved to agt/glas-local-proof at sand-boxer 23d0c2b; the combined profile
+source is available, but Claude is not pinned. The deployed policy was found
+to lack tenant denial at v1; the owner correction v2 is now deployed at Helm
+revision 2 and six live Check fixtures pass, including wrong_tenant denial.
+Tenant choice, workstation caller access, audit load-bearing schema/admission,
+identity/custody and native activation remain gates. T02 remains wait.

workplans/GLAS-WP-0015-production-dependency-coordination.md

@@ -54,7 +54,7 @@ A delivered message is not owner acceptance or implementation evidence.
 
 ```task
 id: GLAS-WP-0015-T03
-status: wait
+status: progress
 priority: high
 state_hub_task_id: "68fcc1b4-537b-5f5e-afb5-063c44e5e4db"
 ```
@@ -76,3 +76,29 @@ while actionable requests lack an owning record or acknowledged disposition.
 | secrets-engine | `7ab6d325-11a2-4f94-9736-b17335054e3c` |
 | flex-auth | `16172bc0-2935-40fe-8b5b-847132ecb689` |
 | sand-boxer | `481b18b6-54ae-44bc-bb31-ffd130d6d8ad` |
+
+## Owner acknowledgements and verified progress
+
+- secrets-engine: `ac6674c7-f737-4437-8287-f39962ed7031` (reviewed and marked read).
+- flex-auth: `b3228e3d-d002-4782-95f1-366a6b11475d` (reviewed and marked read).
+- approval-engine: `d96200ef-5dd4-4cec-9bf7-abb29e2af780` (reviewed and marked read).
+- audit-core: `995a2799-d7a7-477a-b38d-fcef61392067` (reviewed and marked read).
+- sand-boxer: `202429d3-8937-433b-9fac-4ea418f04e58` (reviewed and marked read).
+- key-cape: `9957e19d-e095-4e9d-9db8-ab0c468ceadd` (reviewed and marked read).
+
+Six owners acknowledged; platform custody reply remains outstanding.
+Verified sand-boxer 23d0c2b source profile and exact project binding. No
+production readiness follows from the unpinned Claude executable.
+
+Flex-auth v1 failed to enforce tenant. Deployed the owner v2 correction from
+CI main-d98323b at digest
+sha256:db1c4f7e621c7ea119489a321d7db0e05da09afc17be5f69d873b2b3c7f60cfc,
+Helm revision 2. Six live fixtures pass including wrong_tenant denial; other
+consumer Deployment specs unchanged. Receipt file:
+docs/evidence/GLAS-WP-0015-policy-v2-2026-09-06.json. Do not roll back to the
+known over-permissive v1; if v2 cannot operate, stop this consumer release.
+
+Operator tenant choice is pending. Follow-ups request live tracking of the
+workstation caller path, independent Claude packaging, audit T03 then T09,
+and correct v2 adoption. T03 remains progress until owner prerequisites are
+verified; no real credential or model run has occurred.