diff --git a/workplans/NK-WP-0056-bounded-executor-path.md b/workplans/NK-WP-0056-bounded-executor-path.md
index b1e4693..833000d 100644
--- a/workplans/NK-WP-0056-bounded-executor-path.md
+++ b/workplans/NK-WP-0056-bounded-executor-path.md
@@ -484,8 +484,12 @@ with `T10-LANES-RUNBOOK.md`:
 The image for `9a81123` is `sha256:550bb9d0db89716835b501b4bc822b9588aa63ea15d0e59c61f6a1768b3f16ee`. Its executed
 files are byte-identical to the repo, and it is pinned in the rapp (`9cb19d9`).
 
-Left for T10: the first `make journey` against live. The founder starts the Job; no person is involved in the
-journey itself.
+The first live `make journey` was refused at setup (`URLError`). `make netcheck` showed that k3s applies
+NetworkPolicy to a new pod about 3 s late. The executor now waits up to 30 s for OpenBao's `sys/health` before its
+first login (`15c9cdb`). The image `sha256:71da4a51e331cb82a5bde1e44025dc3b1b7ea4019dd9dbd64e7196cd3dd21471` is
+verified and pinned in the rapp.
+
+Left for T10: a rerun of `make journey` against live (founder-run).
 
 For T06, separately: the approval-engine and audit-core replies, and the token Secret.