diff --git a/workplans/NK-WP-0048-security-case-types.md b/workplans/NK-WP-0048-security-case-types.md
index 80c70cb..71cba31 100644
--- a/workplans/NK-WP-0048-security-case-types.md
+++ b/workplans/NK-WP-0048-security-case-types.md
@@ -827,6 +827,15 @@ priority: high
 state_hub_task_id: "200bf500-5084-5ae7-be26-3033fe1f296e"
 ```
 
+2026-10-17 coordinator review r4 approved the 1.3 candidate at 1920b13 with no
+findings (the-custodian `nk48-adapters-1.2-review/coordinator-review-r4.json`). The founder chose
+option A of the T16 owner-review packet (`nk48-t16-owner-review/founder-option-decision.md`):
+1.3 with execution descriptors for all seven steps. Owner reviews for A are open
+in the-custodian `docs/changes/netkingdom-target-2026-10-17/nk48-1.3-owner-review/` (net-kingdom,
+railiance-platform, railiance-apps, ops-warden, key-cape). The owner-review packet
+supersedes the r1 composition pointer: T16's exact composition is now
+`sso-mfa/k8s/keycape/descriptor-composition-1.3.candidate.json`.
+
 2026-10-17 successor candidate prepared (source only, `proposed`):
 `security-case-type-revisions/1.3/oidc-browser-relying-party/` is the 1.2 package plus
 an `execution_descriptors` map of the seven composed descriptors, with examples