diff --git a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md
index ac86464..12aa4ec 100644
--- a/workplans/WARDEN-WP-0027-credential-governance-lockdown.md
+++ b/workplans/WARDEN-WP-0027-credential-governance-lockdown.md
@@ -11,7 +11,7 @@ topic_slug: custodian
 planning_priority: medium
 planning_order: 27
 created: "2026-07-16"
-updated: "2026-09-28"
+updated: "2026-10-03"
 state_hub_workstream_id: "21528e8d-a049-523d-9ae1-da7a27cb8bbf"
 ---
 
@@ -91,6 +91,7 @@ each verified capabilities-safe, taint cleared only on success.
 id: WARDEN-WP-0027-T02
 status: wait
 needs_human: true
+decision_id: 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa
 blocking_reason: "Trust-root design is a founder decision: who holds unseal shares and recovery keys, quorum, break-glass invocation; executable seal steps are attended."
 priority: medium
 state_hub_task_id: "cae498ee-6307-5d32-9f1b-a471cfcc2536"
@@ -258,6 +259,8 @@ fully parameterized green preflight, and a new human GO. It is executed by the
 platform owner, never by a coding agent. That is an operator decision, not an
 agent one, so T02 stays `progress` and the decision is surfaced rather than taken.
 
+2026-10-03: human gate routed to hub decision 1591daa1-6e85-4dfd-aadd-5a9fe1ef47fa (D3: Trust root and secret custody: unseal/recovery holders, break-glass, and the deferred rotation of exposed material) by CUST-WP-0075; resolving that decision raises C-40 here.
+
 ## Task: Tamper-evident policy governance + reconcile
 
 ```task