diff --git a/plans/mas-tem-relay-smtp.md b/plans/mas-tem-relay-smtp.md
index 8688fbf..1f98e8e 100644
--- a/plans/mas-tem-relay-smtp.md
+++ b/plans/mas-tem-relay-smtp.md
@@ -3,9 +3,9 @@ id: mas-tem-relay-smtp
 demand_source: mail-address-semantics/workplans/MAS-WP-0003-T03
 consumer_repo: mail-address-semantics
 credential_type: openbao-kv-founder-provision
-status: reviewed
-approved_by: null
-approved_at: null
+status: approved
+approved_by: "Bernd Worsch"
+approved_at: "2026-10-18"
 created: "2026-10-18"
 updated: "2026-10-18"
 ---
@@ -252,4 +252,6 @@ access.
 **Cost to reverse:** low. Delete the role, the policy and the KV path, then
 revoke the key. Nothing else depends on it.
 
-**Decision:** pending.
+**Decision:** approved in chat on 2026-10-18 ("approved"), covering this plan and
+CCR-2026-0051. The founder records the CCR approval with railiance-platform's
+`credential-change.py approve`.