diff --git a/workplans/KEY-WP-0034-account-recovery.md b/workplans/KEY-WP-0034-account-recovery.md
index 2cd7f5c..1397a2f 100644
--- a/workplans/KEY-WP-0034-account-recovery.md
+++ b/workplans/KEY-WP-0034-account-recovery.md
@@ -44,3 +44,12 @@ only after browser evidence. Existing application sessions may outlive provider
 logout. Related: USER-WP-0025-T03 and VERGABE-WP-0019-T06.
 
 Source verification: Full Go suite passed; final OIDC/config tests passed after recovery expansion. Immutable publication and live checks are in progress.
+
+### Live recovery rollout — 2026-09-12
+
+Recovery is deployed in KeyCape 4d8b8fe, User Engine e54b6ee and Vergabe c067993
+(Helm revision 3). All three are Ready. Six provider checks, eleven product
+checks and six fresh anonymous Chromium checks pass, including actual provider
+logout POST and return to the portal without test overrides. Real-user identity
+switching is still awaiting operator evidence; no authenticated/MFA acceptance
+is inferred. Detailed receipt: railiance-apps/docs/evidence/2026-09-12-account-recovery-live.md.