diff --git a/registry/indexes/capabilities.yaml b/registry/indexes/capabilities.yaml
index 37ddc35..77da290 100644
--- a/registry/indexes/capabilities.yaml
+++ b/registry/indexes/capabilities.yaml
@@ -67,8 +67,8 @@ capabilities:
   - source
 - id: capability.security.bootstrap-recovery
   name: Guarded bootstrap and recovery preparation
-  summary: Encrypted identity backup, independent retrieval and isolated recovery
-    verification with bootstrap handoff.
+  summary: Guarded bootstrap custody, encrypted identity backup capture, independent
+    retrieval and isolated recovery verification.
   domain: infotech
   status: draft
   owner: net-kingdom
diff --git a/workplans/ADHOC-2026-10-16.md b/workplans/ADHOC-2026-10-16.md
new file mode 100644
index 0000000..37d27d0
--- /dev/null
+++ b/workplans/ADHOC-2026-10-16.md
@@ -0,0 +1,31 @@
+---
+id: NK-WP-ADHOC-2026-10-16
+type: workplan
+title: "Reconcile recovery capability index with its owner entry"
+domain: infotech
+repo: net-kingdom
+status: finished
+owner: codex
+created: "2026-10-16"
+updated: "2026-10-16"
+flavor: implementation
+---
+
+## Reconcile recovery capability index with its owner entry
+
+```task
+id: NK-WP-ADHOC-2026-10-16-T01
+status: done
+priority: medium
+```
+
+Reconcile only the bootstrap-recovery index summary with the existing authoritative capability entry. Old strict validation passed despite the difference; the reviewed validator refuses it until this correction. No recovery capability, maturity, deployed behavior or owner acceptance is added.
+
+Completed 2026-10-16 under the founder's NetKingdom target implementation demand
+(CUST-WP-0080, TSA-11). Source review and exact before/after native CLI evidence:
+`the-custodian/docs/changes/netkingdom-target-2026-10-16/improvement-loop-next/`.
+The current 60-provider cohort has all 70 reviewed IDs exactly once; 3 field
+mismatches across 2 capabilities become zero with the source corrections.
+Native hosted refresh/readback and the accepted Activity/rein schedule remain
+separate gates. No production change, model call, credential access or external
+message was performed.