diff --git a/.custodian-brief.md b/.custodian-brief.md
index fc23d24..2df47aa 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-10-14 22:11 UTC  
+**Last synced:** 2026-10-14 22:26 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -74,7 +74,7 @@ Progress: 2/6 done  |  workplan_id: `c1771c07-4466-5aa2-ad43-df63a471946b`
 
 **Open tasks:**
 - ! KeyCape shows the principal before the callback  `a78219bb`
-  *(wait: Implemented in key-cape af3b1b0 (KEY-WP-0041). Image cdec9dd7 live 2026-10-15. Waits for KEY-WP-0041-T02: live signInDiagnosis flag on the OpenBao client in sso/keycape-config.)*
+  *(wait: Implemented in key-cape af3b1b0 (KEY-WP-0041). Image cdec9dd7 and the openbao-admin signInDiagnosis flag are live (2026-10-15). Waits for one attended OpenBao login that shows the page.)*
 - ! Account site shows both sessions  `bdc8b414`
   *(wait: Implemented in user-engine 80f5870 (USER-WP-0039). Waits for USER-WP-0039-T02: deploy and a mismatched-session check.)*
 - ! Enroll the negative-login factor  `afb5816f`
diff --git a/docs/sign-in-diagnosis.md b/docs/sign-in-diagnosis.md
index efc87cb..b70c12f 100644
--- a/docs/sign-in-diagnosis.md
+++ b/docs/sign-in-diagnosis.md
@@ -62,7 +62,7 @@ OpenBao groups refusal.
 
 | Item | Value |
 | --- | --- |
-| key-cape page and log line | live 2026-10-15: `forgejo.coulomb.social/coulomb/key-cape@sha256:cdec9dd7c515f7e0a6169fc3fa560ee2cc47bf40d899755dec808c362f5ce010` (source `8c6c071`, includes `af3b1b0`). `signInDiagnosis: true` set on live `openbao-admin` 2026-10-15 (`sso/keycape-config` rv 71655453 → 75372162, byte-preserving, issuer restarted). Page acceptance on a real login pending |
+| key-cape page and log line | live 2026-10-15: `forgejo.coulomb.social/coulomb/key-cape@sha256:cdec9dd7c515f7e0a6169fc3fa560ee2cc47bf40d899755dec808c362f5ce010` (source `8c6c071`, includes `af3b1b0`). `signInDiagnosis: true` set on live `openbao-admin` 2026-10-15 (`sso/keycape-config` rv 71655453 → 75372162, byte-preserving, issuer restarted). Accepted 2026-10-15: founder `bao login -method=oidc -path=netkingdom role=platform-admin` showed the page and completed |
 | user-engine two-session lines | source `80f5870`; image digest pending USER-WP-0039-T02 |
 | ops-mason receipt, fresh-browser login, `capabilities-self` proof | ops-mason `fca5591` (MASON-WP-0012); live proof pending MASON-WP-0012-T04 |
 | `sys/capabilities-self` grant and UI workload-role select | railiance-platform `0f0282a` (RPF-WP-0057); CCR-2026-0045 approval/apply and overlay deploy pending RPF-WP-0057-T02/T04 |
diff --git a/workplans/NK-WP-0051-sign-in-diagnosis.md b/workplans/NK-WP-0051-sign-in-diagnosis.md
index 95f84d0..0b850bf 100644
--- a/workplans/NK-WP-0051-sign-in-diagnosis.md
+++ b/workplans/NK-WP-0051-sign-in-diagnosis.md
@@ -9,7 +9,7 @@ flavor: implementation
 owner: codex
 topic_slug: netkingdom
 created: "2026-10-14"
-updated: "2026-10-14"
+updated: "2026-10-15"
 depends_on: []
 related:
   - MASON-WP-0011
@@ -96,10 +96,8 @@ tasks link to it instead of restating it.
 
 ```task
 id: NK-WP-0051-T02
-status: wait
+status: done
 depends_on: [NK-WP-0051-T01]
-blocked_on: message-from:key-cape
-blocking_reason: "Implemented in key-cape af3b1b0 (KEY-WP-0041). Image cdec9dd7 and the openbao-admin signInDiagnosis flag are live (2026-10-15). Waits for one attended OpenBao login that shows the page."
 priority: high
 state_hub_task_id: "a78219bb-2355-5a2e-8750-0b32a57f87bc"
 ```