diff --git a/docs/bounded-execution-contract-table.md b/docs/bounded-execution-contract-table.md
index 3be9837..491302f 100644
--- a/docs/bounded-execution-contract-table.md
+++ b/docs/bounded-execution-contract-table.md
@@ -562,3 +562,23 @@ The agent's default context can read NetworkPolicies in `sso`, `approval-engine`
 Not covered from source: OpenBao's ingress (rapp-openbao is private) and live drift from source, such as the
 approval-engine policy that was live but not in its file. The readiness preflight Job catches unreachable endpoints
 before a window, and T07 and O1 cover the drift.
+
+## Open with owners (index, 2026-11-06)
+
+Everything below was sent as a State Hub message. Nothing in it blocks NK-WP-0058, which is finished. An answer
+goes into the row's record named here.
+
+| Owner | Question or request | Message | Recorded in |
+| --- | --- | --- | --- |
+| railiance-platform | C1 supported window-role interface; O1 which objects Argo owns; C5 stale Secret name in `bounded-executor.md` | `f6198285` | routing table above |
+| railiance-platform | Argo pin drift: informed-decision live `005709a` vs git `77161fe` (OutOfSync); bao-notice `9ee20967` vs `a1f5851` | `549f4ba3` | T05 evidence |
+| railiance-platform | 57 convention-lint findings | `c8371e0d` | NK-WP-0058-T07 |
+| six owners | contract-CI mode (pinned plus nightly main, or a published contract file) | `4892658f`, `3a546559`, `aa44a2b3`, `7cf8d61f`, `a2105e34`, `ee1e5bb5` | Contract CI table above |
+| audit-core, approval-engine, informed-decision, access-engine, key-cape | convention-lint findings (14, 3, 4, 2, 2) | `9e57fd89`, `41b19d89`, `7da9abe8`, `abe7e149`, `573f56a1` | NK-WP-0058-T07 |
+| ops-warden | strip every token variable in `warden access --exec` and name it in the refusal | `4acb653c` | routing table above |
+| informed-decision, access-engine | C6: which copy of the executor's present-existing profile is the source | `fa7e25d3`, `df5aa613` | routing table above |
+| user-engine, tenant-engine | literal tenant-management bearer in the deployed manifest; `POST /v1/tenants` not served | `f441911e`, `700c43f1` | `workplans/ADHOC-2026-11-06.md` T01 |
+| state-hub | fix-consistency C-11 `KeyError 'id'` and C-41 without the 422 reason | `d05750f3` | this table |
+| net-kingdom (NK-WP-0057) | E5/C7 approver and routing; E2 KeyCape client registration; E7 `sso` runtime owners | — | NK-WP-0057-T01 inputs |
+| net-kingdom (NK-WP-0048) | 6 digest-drift test failures in its 1.2/1.3 artifacts | — | `workplans/ADHOC-2026-11-06.md` T02 |
+| founder and railiance-platform | close mode for the window watch (delete on the write role) | — | CCR-2026-0064 `lifecycle.close_mode` |