diff --git a/workplans/KEY-WP-0036-platform-factor-recovery.md b/workplans/KEY-WP-0036-platform-factor-recovery.md
index c2ea960..fd296bc 100644
--- a/workplans/KEY-WP-0036-platform-factor-recovery.md
+++ b/workplans/KEY-WP-0036-platform-factor-recovery.md
@@ -71,10 +71,10 @@ after possession of a replacement factor is proven. Keep P04 incomplete until
 browser success, failure and recovery paths pass; CLI tests alone do not close it.
 
 Completion evidence: user-engine/docs/evidence/2026-09-13-p04-recovery.md.
-KeyCape d15f4dd and portal 11dfaf5 are released. Fifteen recovery tests, 219 portal
+KeyCape 63b3070 and portal c298cd9 are released. Fifteen recovery tests, 219 portal
 regressions with PostgreSQL and 19 Chromium checks pass. Installed-provider
-provider-p04-contract-02 verifies signature/role/assurance denials, confirmation,
-audited mutation/retry/reference lookup and replacement OTP possession/login.
+provider-p04-contract-03 verifies signature/role/assurance denials, confirmation,
+multi-owner refusal, ownership locking, audited mutation/retry/reference lookup and replacement OTP possession/login.
 Production health, anonymous/invalid-token denials, signing-key connectivity,
 rollout and new-enrollment policy readback pass. Positive mutation used disposable
 fixtures; no real account was changed. Provider and portal implement the same