diff --git a/docs/batches/2026-09-14/OPERATOR.md b/docs/batches/2026-09-14/OPERATOR.md
index 8d893a2..5c09295 100644
--- a/docs/batches/2026-09-14/OPERATOR.md
+++ b/docs/batches/2026-09-14/OPERATOR.md
@@ -64,11 +64,19 @@ Open in this order. One question each. No approve-all.
 2. Sitting requester is **live** (CCR-2026-0026/0027, exchange proof 2026-09-15).
    Create seven objects from an **attended** reader session (skips `c01`):
 
+   Installed `warden` may not know this catalog id; use the source catalog.
+   OpenBao is the operator tunnel (`127.0.0.1:18200`), not public
+   `bao.coulomb.social`.
+
    ```sh
    kubectl -n approval-engine port-forward svc/approval-engine 18281:8080
+   export WARDEN_ROUTING_CATALOG=/home/worsch/ops-warden/registry/routing/catalog.yaml
+   export BAO_ADDR=http://127.0.0.1:18200
+   export INFD_APPROVAL_ORIGIN=http://127.0.0.1:18281
    warden access informed-decision-sitting-requester-login --exec -- \
-     env INFD_APPROVAL_ORIGIN=http://127.0.0.1:18281 \
-     uv run python tools/create_sitting_approvals.py
+     /home/worsch/informed-decision/.venv/bin/python -B \
+     /home/worsch/informed-decision/tools/create_sitting_approvals.py \
+     --approval-origin http://127.0.0.1:18281
    ```
 
    Dry-run (this shell): `uv run python tools/create_sitting_approvals.py --dry-run`.
diff --git a/workplans/INFD-WP-0002-compact-signoff-batches.md b/workplans/INFD-WP-0002-compact-signoff-batches.md
index e5ac01a..7168065 100644
--- a/workplans/INFD-WP-0002-compact-signoff-batches.md
+++ b/workplans/INFD-WP-0002-compact-signoff-batches.md
@@ -159,6 +159,13 @@ requires attended reader and posts seven intents (`c01` skipped). Flex
 Auth package still waits on those native ids. This shell is not an
 attended session. Task stays `wait`.
 
+2026-09-15 20:22 UTC — **front door exists in source catalog, not in the
+installed warden bundle.** Playbook now names
+`tools/create_sitting_approvals.py` as the sitting-POST child (proof-only
+child stays `prove-sitting-requester-exchange.sh`). Operator must export
+`WARDEN_ROUTING_CATALOG` and `BAO_ADDR=http://127.0.0.1:18200`. No POST
+from this shell. Task stays `wait`.
+
 ## Feed outcomes back to State Hub without hub-authoring
 
 ```task