diff --git a/workplans/NK-WP-0048-security-case-types.md b/workplans/NK-WP-0048-security-case-types.md
index 3d66ecf..5c8918f 100644
--- a/workplans/NK-WP-0048-security-case-types.md
+++ b/workplans/NK-WP-0048-security-case-types.md
@@ -760,12 +760,21 @@ of these native custody, authorization, owner-acceptance or production claims.
 
 ```task
 id: NK-WP-0048-T15
-status: todo
+status: wait
 depends_on: [NK-WP-0048-T31]
+blocking_reason: "Source candidate 061461e is merged. Waiting on the owner to select the real authenticated original-attempt holder and native readback, and on independent re-review of the changed T13 adapter source."
 priority: high
 state_hub_task_id: "1b825705-4848-5edc-832f-b1622cd9bdb7"
 ```
 
+2026-10-17 source part merged (061461e via 65559ef). `build()` takes optional
+paired `holder`/`observe` capabilities and installs `reconcile_original`; the T31
+fixtures now run through the adapter's own path. Rollback after restart is still
+refused, and there is no add replay. This changes `keycape-registration-adapter.py`,
+so the revision reviewed under Custodian `browser-adapter-next/coordinator-review-r3.json`
+is superseded. The new revision has no independent review yet and must not be
+pinned on the strength of the old one.
+
 2026-10-17: T31 fixtures done (74adcd7). What remains for T15: the owner
 selects the real authenticated original-attempt holder, and the T13 adapter
 gains the holder capability, `reconcile_original` and reconcile-aware `verify`
@@ -1374,6 +1383,13 @@ priority: high
 state_hub_task_id: "6f6073ac-52dd-5b70-8874-6d76d4c072e4"
 ```
 
+2026-10-17 prerequisites merged (65559ef; combined suite 78 passed):
+ensure-groups accepts 1.2 via an explicit `version_root='1.2'` (531151b), with
+1.1 still the default. bind-env is now a full Warden v1 `Adapter` (7442d21); its
+kernel-level fixture tests like T13's are still missing, and its `build()`
+signature changed. Composition is unblocked in source. Owner confirmation of
+the proposed step, lane and schema names remains before pinning.
+
 2026-10-17 inputs from T24–T29 that composition must resolve: T24 accepts
 only 1.1 while T28 accepts only 1.2, so add an explicit 1.2 ensure-groups path;
 T27 still needs full Warden `Adapter` wrapping; the lane, schema and owner names