diff --git a/workplans/NK-WP-0056-bounded-executor-path.md b/workplans/NK-WP-0056-bounded-executor-path.md
index 066cbd6..9cad0cc 100644
--- a/workplans/NK-WP-0056-bounded-executor-path.md
+++ b/workplans/NK-WP-0056-bounded-executor-path.md
@@ -573,17 +573,9 @@ Server dry run with the limited `ops-mason-builder` identity:
 
 Left:
 
-- Founder: the full server dry run with the admin kubeconfig. Nothing is created:
-
-  ```bash
-  cd ~/rapp-bounded-executor
-  K="kubectl --kubeconfig $HOME/.kube/config-railiance01"
-  make server-dry-run KUBECTL="$K"
-  make server-dry-run-job KUBECTL="$K" NOW=2026-11-03T09:05:00Z IMAGE_DIGEST=sha256:$(printf 'ab%.0s' {1..32}) \
-    ADMISSION=$HOME/net-kingdom/examples/bounded-execution-admission/bind-rotation-svc-authelia.yaml \
-    APPROVAL_ID=apr-synthetic-1 CONFIG=examples/config.pilot.json
-  ```
-
+- DONE 2026-10-31, founder: full server dry run with the admin kubeconfig. The ServiceAccount, Role, RoleBinding and
+  NetworkPolicy were applied server-side as a dry run, and the synthetic BEA-2026-0001 ConfigMap and Job were created
+  as a dry run. Nothing was persisted.
 - Confirm that the image workflow's first run passed (not checked from here), then `rmgr rapp pin-image`.
 - Founder: create the Forgejo remote `coulomb/rapp-bounded-executor` and push.