diff --git a/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md b/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
index a5f51ce..ffdf12f 100644
--- a/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
+++ b/workplans/KEY-WP-0039-openbao-negative-probe-tokens.md
@@ -97,13 +97,14 @@ transient Kubernetes Secret that is deleted in the same session.
 
 ```task
 id: KEY-WP-0039-T02
-status: wait
+status: todo
 depends_on: [KEY-WP-0039-T01]
-blocking_reason: "Live registration and custody need owner authorization."
 priority: medium
 state_hub_task_id: "03da4c38-1dac-53b1-8b0b-e697df48e9d3"
 ```
 
+2026-10-11: requalified — live registration go caafe4be was already resolved; owner authorization present. See the-custodian docs/decisions/2026-10-11-security-unblock-decisions.md.
+
 ### T02 — Register the probe clients, run the attended probe, then remove them
 
 Write the attended script, which prints booleans only.