diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 6e5f742..1944d6c 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -49,7 +49,7 @@
 | workplan | NK-WP-0049 | active | — | workplans/NK-WP-0049-bootstrap-secret-free-recovery-handoff.md |
 | workplan | NK-WP-0050 | active | — | workplans/NK-WP-0050-playwright-consumer-registration.md |
 | workplan | NK-WP-0051 | finished | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
-| workplan | NK-WP-0052 | ready | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
+| workplan | NK-WP-0052 | finished | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
 | task | NK-WP-ADHOC-2026-07-02-T01 | done | — | workplans/ADHOC-2026-07-02.md |
 | task | NK-WP-ADHOC-2026-07-02-T02 | done | — | workplans/ADHOC-2026-07-02.md |
 | task | NK-WP-ADHOC-2026-08-14-T01 | done | — | workplans/ADHOC-2026-08-14.md |
@@ -298,7 +298,7 @@
 | task | NK-WP-0051-T04 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
 | task | NK-WP-0051-T05 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
 | task | NK-WP-0051-T06 | done | — | workplans/NK-WP-0051-sign-in-diagnosis.md |
-| task | NK-WP-0052-T01 | wait | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
+| task | NK-WP-0052-T01 | done | — | workplans/NK-WP-0052-wave2-resource-right-sizing.md |
 | intake | NK-IN-0001 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
 | intake | NK-IN-0002 | closed | blue | docs/intakes/activity-core-ops-sso-operators.md |
 | intake | NET-IN-0001 | open | — | intakes/intakes.md |
diff --git a/workplans/NK-WP-0052-wave2-resource-right-sizing.md b/workplans/NK-WP-0052-wave2-resource-right-sizing.md
index 5a2494f..4c11a83 100644
--- a/workplans/NK-WP-0052-wave2-resource-right-sizing.md
+++ b/workplans/NK-WP-0052-wave2-resource-right-sizing.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Wave-2 resource right-sizing from the 2026-10-21 allocation review"
 domain: infotech
 repo: net-kingdom
-status: ready
+status: finished
 flavor: implementation
 owner: claude
 topic_slug: netkingdom
@@ -26,10 +26,8 @@ Origin: the 2026-10-21 node allocation review (`RESOURCE-WP-0008-T03`, feeding `
 
 ```task
 id: NK-WP-0052-T01
-status: wait
+status: done
 priority: medium
-needs_human: true
-blocking_reason: "Wave-2 cluster write; founder approval for wave 2 not yet given (2026-10-21 interview)"
 state_hub_task_id: "a69cd984-3c32-5087-9438-913c37e309f6"
 ```
 
@@ -89,3 +87,7 @@ privacyidea = MFA; net-kingdom-pg restart (CNPG single instance) takes
 privacyIDEA/authelia storage down briefly. Run off-peak, health-check between.
 
 Rollback: revert the source commit and re-sync/re-apply; the before values in the table above are the rollback target. Keep before/after `kubectl get -o yaml` captures as the receipt.
+
+## Applied — 2026-10-22 (NK-WP-0052-T01)
+
+Applied under the founder's wave-2 authorization (the-custodian docs/decisions/2026-10-21-cust-wp-0071-delivery-interview.md), after a full-render diff against live that showed resources only. lldap CPU limit raised to 1 core (it had been throttled); authelia, keycape, identity-provisioner and privacyIDEA right-sized; net-kingdom-pg restarted at 22:40Z at 50m and is healthy. KeyCape discovery returns 200 and the forge sign-in redirect works. Evidence: the-custodian docs/evidence/2026-10-22-wave2-apply.md.