diff --git a/workplans/MASON-WP-0004-credential-inventory-descriptions.md b/workplans/MASON-WP-0004-credential-inventory-descriptions.md
index aa71bf8..3e7e190 100644
--- a/workplans/MASON-WP-0004-credential-inventory-descriptions.md
+++ b/workplans/MASON-WP-0004-credential-inventory-descriptions.md
@@ -9,7 +9,7 @@ flavor: planning
 owner: codex
 topic_slug: custodian
 created: "2026-08-28"
-updated: "2026-09-28"
+updated: "2026-10-03"
 related:
   - MASON-WP-0003
   - NK-WP-0033
@@ -51,6 +51,7 @@ read, and `ops-mason-build` cannot read one.
 id: MASON-WP-0004-T01
 status: wait
 needs_human: true
+decision_id: e9f44beb-ad15-4285-8996-1e66d312fe59
 blocking_reason: "Founder ruling on the genuinely unclear paths; no scoped metadata grant or complete inventory yet."
 priority: medium
 state_hub_task_id: "5bda75f2-f780-579e-9d44-cc4011662b9a"
@@ -67,12 +68,15 @@ than an empty one, because a rotation will trust it.
 Acceptance: every one of the seventeen has a named owner, or is explicitly
 listed as unknown with the question that would settle it.
 
+2026-10-03: human gate routed to hub decision e9f44beb-ad15-4285-8996-1e66d312fe59 (D8: ops-mason plan approvals: unclear metadata paths and the live-survey plan) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Describe the paths whose purpose is already documented
 
 ```task
 id: MASON-WP-0004-T02
 status: wait
 needs_human: true
+decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
 blocking_reason: "Requires a valid scoped metadata grant (operator) before the described paths can be written and verified."
 priority: medium
 state_hub_task_id: "a6a944d7-21c5-5043-a78d-b3809de0ee64"
@@ -87,6 +91,8 @@ pointing at the real procedure rather than paraphrasing it.
 Acceptance: `custody-inventory.py` reports these paths without a `!`, and each
 `rotation` field names a document that exists.
 
+2026-10-03: human gate routed to hub decision 62aa95e4-3ccc-4867-8806-5e3db005b483 (D1: Attended OpenBao provisioning window: one session clears the pending credential lanes) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Resolve the rest with their owners
 
 ```task
diff --git a/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md b/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md
index f50a01a..ed401d0 100644
--- a/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md
+++ b/workplans/MASON-WP-0005-fluid-telegram-operator-credential-lane.md
@@ -9,7 +9,7 @@ flavor: planning
 owner: codex
 topic_slug: helix-forge
 created: "2026-09-04"
-updated: "2026-09-28"
+updated: "2026-10-03"
 state_hub_workstream_id: "483e56d6-6601-5377-9066-66225214c046"
 ---
 
@@ -92,6 +92,7 @@ parent access, and the create-only salt shape.
 id: MASON-WP-0005-T03
 status: wait
 needs_human: true
+decision_id: e9f44beb-ad15-4285-8996-1e66d312fe59
 depends_on: [MASON-WP-0005-T01, MASON-WP-0005-T02]
 blocking_reason: "Explicit human approval of the plan (status: approved, approved_by, approved_at) after the live survey."
 priority: high
@@ -106,6 +107,8 @@ write-once recovery consequence, agent boundary, reversal procedure, and
 adapter separation for explicit human approval. Only the plan's
 `status: approved` plus `approved_by` and `approved_at` authorizes a build.
 
+2026-10-03: human gate routed to hub decision e9f44beb-ad15-4285-8996-1e66d312fe59 (D8: ops-mason plan approvals: unclear metadata paths and the live-survey plan) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Build the approved operator lane
 
 ```task
diff --git a/workplans/MASON-WP-0006-readiness-tier-check.md b/workplans/MASON-WP-0006-readiness-tier-check.md
index 1d20d0f..fca8acd 100644
--- a/workplans/MASON-WP-0006-readiness-tier-check.md
+++ b/workplans/MASON-WP-0006-readiness-tier-check.md
@@ -9,7 +9,7 @@ flavor: implementation
 owner: claude
 topic_slug: ops-mason
 created: "2026-09-21"
-updated: "2026-09-28"
+updated: "2026-10-03"
 state_hub_workstream_id: "1b900161-51ff-544f-8412-ba7fcab64bb5"
 ---
 
@@ -218,6 +218,7 @@ rail-kubernetes ownership/layer assertion from INTENT.md.
 id: MASON-WP-0006-T06
 status: wait
 needs_human: true
+decision_id: 89f1058f-33bc-47a8-8a49-0b44d426c67e
 blocked_on: message-from:railiance-platform
 blocking_reason: "Dated review 2026-12-21: platform confirms policy-nexus ArgoCD onboarding; founder reviews the plan-approval exception."
 priority: medium
@@ -229,6 +230,8 @@ comes up for review. Confirm with railiance-platform that policy-nexus is
 onboarded to ArgoCD. The date check in T03 ends the transition in code on that
 date either way.
 
+2026-10-03: human gate routed to hub decision 89f1058f-33bc-47a8-8a49-0b44d426c67e (D2: ArgoCD owns production: go-ahead sequence for railiance-apps-root, issue-core, policy-nexus and activity-core automation) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Loose-end review — 2026-09-28
 
 T01–T05 are done: the founder resolved the whitehat placement and the guarded readiness implementation, tests, emergency evidence and docs are complete. T06 remains wait until the 2026-12-21 platform/exception review; this workplan is blocked on that dated review.
diff --git a/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md b/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md
index b2c7782..b181331 100644
--- a/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md
+++ b/workplans/MASON-WP-0007-tenant-engine-audit-core-sender-projection.md
@@ -96,6 +96,7 @@ state_hub_task_id: "e56f0374-fede-5494-8266-a30f08896a6a"
 id: MASON-WP-0007-T05
 status: wait
 needs_human: true
+decision_id: 62aa95e4-3ccc-4867-8806-5e3db005b483
 depends_on: [MASON-WP-0007-T03]
 blocked_on: founder
 blocking_reason: "Wrapped platform-admin process copies the tenant-engine token from the registry document to platform/workloads/tenant-engine/audit-core-sender without printing it; ops-mason-build is denied value reads, so only an attended admin lane can do it."
@@ -103,6 +104,8 @@ priority: high
 state_hub_task_id: "1bb05319-25a5-579f-8b63-897ec583bc3e"
 ```
 
+2026-10-03: human gate routed to hub decision 62aa95e4-3ccc-4867-8806-5e3db005b483 (D1: Attended OpenBao provisioning window: one session clears the pending credential lanes) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Verify and hand off
 
 ```task