diff --git a/workplans/MAS-WP-0003-provider-live-test.md b/workplans/MAS-WP-0003-provider-live-test.md
index 7d535ac..8d5c4ff 100644
--- a/workplans/MAS-WP-0003-provider-live-test.md
+++ b/workplans/MAS-WP-0003-provider-live-test.md
@@ -36,6 +36,12 @@ Needs the operator. Pick the subdomain. Add an MX (and A) record at IONOS
 pointing to railiance01 (92.205.62.239). Allow inbound TCP 25 on
 railiance01. Record the choice as a decision.
 
+- 2026-10-08: DNS done. `mas.coulomb.social` has MX 10 to itself and A
+  92.205.62.239. Inbound TCP 25 is still closed (connection timed out from
+  the workstation; nothing listens on 25 and ufw allows only SSH and 2224).
+  The port-25 exposure is a live production change and needs the founder's
+  go.
+
 ## Deploy Postfix + gateway + ticket service + statute
 
 ```task