diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index baeb927..4b03182 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -339,7 +339,7 @@
 | task | NK-WP-0056-T02 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
 | task | NK-WP-0056-T03 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
 | task | NK-WP-0056-T04 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
-| task | NK-WP-0056-T05 | progress | — | workplans/NK-WP-0056-bounded-executor-path.md |
+| task | NK-WP-0056-T05 | done | — | workplans/NK-WP-0056-bounded-executor-path.md |
 | task | NK-WP-0056-T06 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
 | task | NK-WP-0056-T07 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
 | task | NK-WP-0056-T08 | todo | — | workplans/NK-WP-0056-bounded-executor-path.md |
diff --git a/workplans/NK-WP-0056-bounded-executor-path.md b/workplans/NK-WP-0056-bounded-executor-path.md
index 10d15dd..45f33b3 100644
--- a/workplans/NK-WP-0056-bounded-executor-path.md
+++ b/workplans/NK-WP-0056-bounded-executor-path.md
@@ -241,7 +241,7 @@ No bind rotation needs the custody copy decrypted. The custody copy keeps the cu
 
 ```task
 id: NK-WP-0056-T05
-status: progress
+status: done
 priority: medium
 assignee: claude-code
 depends_on: [NK-WP-0056-T04]
@@ -269,8 +269,8 @@ KeyCape's JWKS without third-party packages; `host_map` for an in-cluster execut
 `test_journey.py`. Each broken bind fails closed at its step (`svc-authelia` → `authelia_first_factor`,
 `svc-keycape` → `keycape_callback`, `svc-privacyidea` → `keycape_otp`), and a sign-in without an OTP
 challenge, an aal1 token or a tampered signature fails. Green locally and in the workflow's pinned
-`python:3.12-slim` image with the network off; the job is added to `identity-journeys.yaml`. Done
-once the workflow run on `main` is green.
+`python:3.12-slim` image with the network off; the job is added to `identity-journeys.yaml`.
+**Done:** the workflow's `provider` job passed on `0b0c6c9` (run 719). Next: T08.
 
 ## Synthetic identity stack on pinned images