diff --git a/workplans/IR-WP-0005-credential-delivery.md b/workplans/IR-WP-0005-credential-delivery.md
index 7d42fa5..06acca6 100644
--- a/workplans/IR-WP-0005-credential-delivery.md
+++ b/workplans/IR-WP-0005-credential-delivery.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Deliver admitted OpenRouter credentials to Radar"
 domain: infotech
 repo: intelligence-radar
-status: blocked
+status: finished
 flavor: implementation
 owner: codex
 topic_slug: custodian
@@ -41,11 +41,7 @@ passed, three approvals consumed and non-reusable. Full record with pointers (no
 
 ```task
 id: IR-WP-0005-T02
-status: wait
-needs_human: true
-decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
-blocked_on: evidence:2026-09-27-t03-attended-delivery
-blocking_reason: "Founder accepted the three memo-version-3 reviews on 2026-10-04. Remaining gate is the attended read-only key-check delivery and its two receipts, before 2026-10-05T14:24:25Z."
+status: done
 priority: high
 state_hub_task_id: "c4b2378a-5241-5195-8c4b-d53ec58a7f72"
 ```
@@ -103,6 +99,23 @@ nothing. The empty directory was recreated at mode 0700, and the local
 preflight then passed. One further delivery follows, worker
 `01a10771-88c8-7a31-ae9f-23e74d71b37a`.
 
+2026-10-04T15:10:05Z: that retry passed. Warden exited 0. Attended receipt
+`railiance-platform/docs/evidence/2026-09-27-t03-attended-delivery.json` is
+`passed` / `native_actions_completed`, `credential_values_emitted` false,
+private runtime removed. Native receipt
+`secrets-engine/docs/evidence/2026-09-27-t03-native-execution.json` is
+`passed` / `all_actions_completed`. Apply was already satisfied, so approval
+`b5fcbfcc-ad56-456f-bc36-c823052e9917` was not consumed and the role limits
+stayed token TTL 900, max TTL 1800, secret-id TTL 900, one secret-id use,
+eight token uses. Verify `4e9ff881-d59f-4143-9155-929afbe8dd43` exited 0 with
+the unrelated path denied, the session revocation checked, and the revoked
+token lookup at HTTP 403. Exec `a24e0898-b3c5-4e50-85a8-18a2c2aa229e` exited 0.
+The pinned recipient key check returned `authenticated` with HTTP 200.
+`llm-connect` stayed ready and its ExternalSecret stayed ready. No provider
+key was rotated and no inference was run. Hub decision
+`62aa95e4-3ccc-4867-8806-5e3db005b483` stays open. Billing remains
+IR-WP-0006-T03. Field outcomes remain IR-WP-0007.
+
 Asked informed-decision to provide the already specified pose-and-answer path
 (`INFD-WP-0005`, `docs/specs/FrictionlessDecisionIntake.md`): one prepared
 decision, a returned review URL, and the same login able to open and answer it.
diff --git a/workplans/IR-WP-0006-billing-reconciliation.md b/workplans/IR-WP-0006-billing-reconciliation.md
index a4016b3..4c78c40 100644
--- a/workplans/IR-WP-0006-billing-reconciliation.md
+++ b/workplans/IR-WP-0006-billing-reconciliation.md
@@ -73,5 +73,8 @@ workplan forbids. Waits on external evidence (likely via the IR-WP-0005 admitted
 
 Rechecked 2026-10-04: the ledger still has the one `reserved` event for
 `29a46a1d6c2d9ef6cfce8de6efef75cddcfecee346c1b4babf57119f1a241d71` and no
-provider billing artifact. IR-WP-0005-T02 is still wait, so the read-only path
-is still closed. `reconcile` was not called. Stays wait.
+provider billing artifact. IR-WP-0005-T02 passed on 2026-10-04: the pinned
+recipient key check returned `authenticated` with HTTP 200. That check is not
+a billing artifact for run
+`29a46a1d6c2d9ef6cfce8de6efef75cddcfecee346c1b4babf57119f1a241d71`. `reconcile`
+was not called. Stays wait.