diff --git a/profiles/harness.fi-research-brief.yaml b/profiles/harness.fi-research-brief.yaml
index a08a889..96b227d 100644
--- a/profiles/harness.fi-research-brief.yaml
+++ b/profiles/harness.fi-research-brief.yaml
@@ -3,8 +3,8 @@ version: "1.0.0"
 contract_version: "1.0"
 status: enabled
 operational_readiness:
-  status: blocked
-  reason: sandbox profile profile.bwrap-fi-research (sand-boxer) does not exist yet; no sandboxed proof run
+  status: unverified
+  reason: sandbox profile (sand-boxer 4cffd7d) and tool profile (rein-aharness 820d33b) exist; no sandboxed proof run yet; live activation depends on SAND-WP-0015-T04 and the rein-aharness publisher
   owner: glas-harness
   evidence_ref: GLAS-WP-0016-T04
 rein:
@@ -35,6 +35,7 @@ metadata:
   # freedom-intelligence/docs/sources-egress.yaml (GLAS-WP-0016-T02).
   # The session writes and commits only under briefs/** and never pushes;
   # publication is the deterministic publisher in docs/publish-grant-design.md.
+  # Sandbox profile.bwrap-fi-research: sand-boxer 4cffd7d (18 egress hosts).
   # Tool profile green-research-commit: rein-aharness 820d33b.
   # Model pin and max_budget_usd follow harness.agent-dev-local 1.1.1
   # (envelope hfact-glas-anthropic-2026-09). Readiness moves to unverified when
diff --git a/tests/test_profiles.py b/tests/test_profiles.py
index 6e9f204..bc27d83 100644
--- a/tests/test_profiles.py
+++ b/tests/test_profiles.py
@@ -81,7 +81,7 @@ def test_committed_catalog_resolves_both_constellations() -> None:
         ("harness.agent-dev-local", "1.1.1", "unverified"),
         ("harness.agent-dev-openweights-local", "1.0.0", "blocked"),
         ("harness.agent-dev", "1.0.0", "unverified"),
-        ("harness.fi-research-brief", "1.0.0", "blocked"),
+        ("harness.fi-research-brief", "1.0.0", "unverified"),
     }
     profile, descriptor = catalog.resolve(
         "harness.agent-dev-openweights-local@1.0.0"
diff --git a/workplans/GLAS-WP-0016-fi-research-brief-profile.md b/workplans/GLAS-WP-0016-fi-research-brief-profile.md
index 0fc0f86..04e33c2 100644
--- a/workplans/GLAS-WP-0016-fi-research-brief-profile.md
+++ b/workplans/GLAS-WP-0016-fi-research-brief-profile.md
@@ -43,15 +43,14 @@ names being agreed, not on their release.
 
 2026-10-13: added `profiles/harness.fi-research-brief.yaml` with readiness
 `blocked` (runs refuse before sandbox creation) until T02/T03 land; catalog
-snapshot test updated, 139 tests pass.
+snapshot test updated, 139 tests pass. Readiness moved to `unverified` after
+T02 and T03 landed (2026-10-13).
 
 ## Add the sand-boxer egress sandbox profile
 
 ```task
 id: GLAS-WP-0016-T02
-status: wait
-blocked_on: message-from:sand-boxer
-blocking_reason: "Handoff 744aa305 sent 2026-10-13; await sand-boxer profile.bwrap-fi-research."
+status: done
 priority: high
 state_hub_task_id: "d79ad740-eec6-5e93-9d90-49475982a900"
 ```
@@ -62,7 +61,9 @@ equal to the model route plus exactly the 17 hosts in FI's
 `sources-egress.yaml`, per `sand-boxer/docs/bwrap-egress.md` (exact lowercase
 DNS names, :443, no wildcards or IP literals). Owner config `allowed_egress`
 must be a superset. Glas sends the handoff and records the owner's return.
-Handoff sent 2026-10-13 as message 744aa305.
+Handoff sent 2026-10-13 as message 744aa305. Delivered in sand-boxer 4cffd7d
+(reply a49bf85c): `profiles/profile.bwrap-fi-research.yaml`, egress
+`api.anthropic.com:443` plus exactly FI's 17 hosts (verified 2026-10-13).
 
 ## Add the rein-aharness research tool profile
 
@@ -88,9 +89,10 @@ not by the tool profile.
 ```task
 id: GLAS-WP-0016-T04
 status: wait
-depends_on: [GLAS-WP-0016-T02, GLAS-WP-0016-T03, GLAS-WP-0016-T05]
+depends_on: [SAND-WP-0015-T04]
+blocked_on: message-from:rein-aharness
 priority: high
-blocking_reason: "Depends on T02 (sand-boxer egress profile) and the rein-aharness publisher (decision c6f23433)."
+blocking_reason: "Live activation needs sand-boxer owner credential delivery (SAND-WP-0015-T04); publication needs the rein-aharness publisher (decision c6f23433, request 780c78d1)."
 state_hub_task_id: "6faf1b1c-164d-5d6d-8dad-6cf920a5fd6c"
 ```