diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index e704389..926fc0d 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -23,7 +23,7 @@
 | workplan | GLAS-WP-0012 | blocked | — | workplans/GLAS-WP-0012-first-local-profile-production-proof.md |
 | workplan | GLAS-WP-0013 | finished | — | workplans/GLAS-WP-0013-execution-outcome-evidence.md |
 | workplan | GLAS-WP-0014 | finished | — | workplans/GLAS-WP-0014-sandbox-handoff-validation.md |
-| workplan | GLAS-WP-0015 | active | — | workplans/GLAS-WP-0015-production-dependency-coordination.md |
+| workplan | GLAS-WP-0015 | blocked | — | workplans/GLAS-WP-0015-production-dependency-coordination.md |
 | task | ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md |
 | task | ADHOC-2026-09-06-T02 | done | — | workplans/ADHOC-2026-09-06.md |
 | task | ADHOC-2026-09-06-T03 | done | — | workplans/ADHOC-2026-09-06.md |
diff --git a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md
index 8cf2113..2c4a2e4 100644
--- a/workplans/GLAS-WP-0012-first-local-profile-production-proof.md
+++ b/workplans/GLAS-WP-0012-first-local-profile-production-proof.md
@@ -9,7 +9,7 @@ flavor: implementation
 owner: codex
 topic_slug: first-local-profile-production-proof
 created: "2026-09-05"
-updated: "2026-09-24"
+updated: "2026-09-27"
 state_hub_workstream_id: "170bf1ae-337f-5553-8d1e-03b07100e08f"
 ---
 
@@ -394,3 +394,13 @@ now `blocked`. Runtime `2cfc7b5f` bundles the earlier 1.1.0 copy (profile sha
 `e84b9d0f…`) and must be rebuilt with this revision and placed again
 (SECRETS-WP-0009-T03). Claude CLI 2.1.266 in that runtime lists
 `claude-sonnet-5` in its model registry (static check). 134 tests pass.
+
+## 2026-09-27 loose-ends review
+
+Reviewed for locally finishable work. No new owner reply advances T02 beyond
+the 2026-09-23 secrets-engine status already recorded in GLAS-WP-0015-T03.
+T03's remaining done condition (runtime `2cfc7b5f` rebuilt with 1.1.1 and
+started through its owner on railiance01, SECRETS-WP-0009-T03 step B2) and
+T04/T05 all require that external owner delivery. Nothing in this repo can
+advance them today; `status: blocked` stands unchanged. Re-review when the
+runtime rebuild/placement or owner authentication lands.
diff --git a/workplans/GLAS-WP-0015-production-dependency-coordination.md b/workplans/GLAS-WP-0015-production-dependency-coordination.md
index 95985c1..86abcc8 100644
--- a/workplans/GLAS-WP-0015-production-dependency-coordination.md
+++ b/workplans/GLAS-WP-0015-production-dependency-coordination.md
@@ -4,12 +4,12 @@ type: workplan
 title: "Drive owner returns for the first production Glas profile"
 domain: infotech
 repo: glas-harness
-status: active
+status: blocked
 flavor: implementation
 owner: codex
 topic_slug: production-dependency-coordination
 created: "2026-09-06"
-updated: "2026-09-23"
+updated: "2026-09-27"
 state_hub_workstream_id: "94c02b1f-66ed-588d-bdd7-7158107b85fb"
 ---
 
@@ -215,3 +215,15 @@ This resolves candidate binary pin/startup, not protected runtime deployment,
 Claude provider-request compatibility, credential delivery or a real model run.
 The candidate is in /tmp; no production profile readiness changed. Existing
 credential and acceptance tasks remain open. No new owner replies at session start.
+
+## 2026-09-27 loose-ends review
+
+Reviewed all workplans in this repo for locally finishable tasks. No new owner
+returns exist since the 2026-09-23 secrets-engine reply already recorded in T03
+(`21cedcd9-2c26-4574-931c-66cae95b88cf`); its stated next blocker is operator
+input on secrets-engine's side (placement, spend envelope/model bounds,
+negative-test identity), followed by HFACT-WP-0001-T01/T04 and exec_owner
+configuration — none of it actionable from glas-harness. T03 has no further
+local step; marking this workplan `blocked` rather than `active` since it
+cannot progress without those external owner deliverables. No code or task
+status changed. Re-review when a new owner reply lands in the inbox.