diff --git a/.repo-classification.yaml b/.repo-classification.yaml
new file mode 100644
index 0000000..a879556
--- /dev/null
+++ b/.repo-classification.yaml
@@ -0,0 +1,31 @@
+# Repo Classification Standard v1.0; validated by Repo Manager.
+repo_classification:
+  standard: Repo Classification Standard
+  version: "1.0"
+  classified_at: "2026-08-22"
+  classified_by: codex
+  category: tooling
+  domain: infotech
+  secondary_domains:
+    - agents
+  capability_tags:
+    - access-control
+    - automation
+    - credential-provisioning
+    - governance
+    - infrastructure
+    - security
+  business_stake:
+    - automation
+    - execution
+    - operations
+    - technology
+  business_mechanics:
+    - control
+    - coordination
+    - operation
+    - adaptation
+  notes: >-
+    Reusable internal construction tooling for governed OpenBao and Kubernetes
+    access infrastructure. It serves operators and coding agents across the
+    ecosystem; it is not a customer-facing product or a credential custodian.
diff --git a/plans/rapp-qonto-openbao-approle-bridge.md b/plans/rapp-qonto-openbao-approle-bridge.md
index e828519..f0fdea6 100644
--- a/plans/rapp-qonto-openbao-approle-bridge.md
+++ b/plans/rapp-qonto-openbao-approle-bridge.md
@@ -3,11 +3,11 @@ id: rapp-qonto-openbao-approle-bridge
 demand_source: reef-railiance/workplans/REEF-RAILIANCE-WP-0003-T01
 consumer_repo: rapp-qonto
 credential_type: openbao-approle-kv
-status: approved
+status: built
 approved_by: Bernd Worsch
 approved_at: "2026-07-27"
 created: "2026-07-27"
-updated: "2026-07-27"
+updated: "2026-08-22"
 ---
 
 # Construction plan: rapp-qonto OpenBao AppRole bridge
diff --git a/workplans/MASON-WP-0002-whitehat-foundational-plane.md b/workplans/MASON-WP-0002-whitehat-foundational-plane.md
index 85d9ba2..a67dad1 100644
--- a/workplans/MASON-WP-0002-whitehat-foundational-plane.md
+++ b/workplans/MASON-WP-0002-whitehat-foundational-plane.md
@@ -134,7 +134,7 @@ rollback; no rollback command or target packet was executed.
 
 ```task
 id: MASON-WP-0002-T03
-status: progress
+status: done
 priority: high
 state_hub_task_id: "a9c0844b-bf0a-5a53-b7e7-c0c2fbb842e6"
 ```
@@ -152,11 +152,16 @@ records with new identifiers and their own approvals.
 **Done when:** both requesters have apply evidence and rollback, State Hub has
 a progress record, and the next engagement remains explicitly separate.
 
+**Done (2026-08-22):** evidence landed in ops-mason commit `c26a6e5` and was
+sent with rollback to Whitehat (`a5f00f62-76f2-4ab1-92a3-40c67942813e`) and
+audit-core (`161242af-fdf9-45f9-b635-86d95863e24e`). Both handoffs preserve the
+separate fresh-engagement, credential, runner, and traffic gates.
+
 ## Reconcile local intake and publication drift
 
 ```task
 id: MASON-WP-0002-T04
-status: todo
+status: progress
 priority: low
 state_hub_task_id: "f71f5eee-9ae0-50a2-a38d-2119d5abd175"
 ```