diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index c98634f..6ba620e 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -26,7 +26,7 @@
 | workplan | GLAS-WP-0015 | blocked | — | workplans/GLAS-WP-0015-production-dependency-coordination.md |
 | workplan | GLAS-WP-0016 | blocked | — | workplans/GLAS-WP-0016-fi-research-brief-profile.md |
 | workplan | GLAS-WP-0017 | blocked | — | workplans/GLAS-WP-0017-assembly-checkpoint-governed-route.md |
-| workplan | GLAS-WP-0018 | proposed | — | workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md |
+| workplan | GLAS-WP-0018 | ready | — | workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md |
 | task | ADHOC-2026-09-06-T01 | done | — | workplans/ADHOC-2026-09-06.md |
 | task | ADHOC-2026-09-06-T02 | done | — | workplans/ADHOC-2026-09-06.md |
 | task | ADHOC-2026-09-06-T03 | done | — | workplans/ADHOC-2026-09-06.md |
diff --git a/workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md b/workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md
index 4cccb2a..9587259 100644
--- a/workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md
+++ b/workplans/GLAS-WP-0018-session-agent-identity-and-tool-boundary.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Session-scoped agent identity, attribution and tool boundary"
 domain: infotech
 repo: glas-harness
-status: proposed
+status: ready
 flavor: implementation
 owner: claude
 topic_slug: session-agent-identity-tool-boundary
@@ -125,3 +125,7 @@ admission reference or a non-default tool profile. Glas does not validate the
 admission itself. Waits on T01 to T04 and on Bounded Execution Admission v0.1
 moving past `proposed`. The pilot executor is not an agent (founder decision
 6d1adce9), so this is not on the pilot path.
+
+## Founder decision 2026-10-31
+
+Approved by the founder (`proposed` -> `ready`) after the NK-WP-0056-T02 owner answers (hub decision 19afd15e). The founder also confirmed glas-harness as the later owner of the agent-executor path (T07).