diff --git a/workplans/WARDEN-WP-0043-platform-supplier-credentials.md b/workplans/WARDEN-WP-0043-platform-supplier-credentials.md
index 25c6c92..d359328 100644
--- a/workplans/WARDEN-WP-0043-platform-supplier-credentials.md
+++ b/workplans/WARDEN-WP-0043-platform-supplier-credentials.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Route supplier credentials under platform/suppliers"
 domain: infotech
 repo: ops-warden
-status: active
+status: finished
 flavor: implementation
 owner: grok
 topic_slug: platform-suppliers
@@ -85,7 +85,7 @@ The IONOS CCR can now be drafted against this shape.
 
 ```task
 id: WARDEN-WP-0043-T03
-status: progress
+status: done
 priority: medium
 needs_human: true
 state_hub_task_id: "87996bc7-2f7a-578d-9f7c-8bd876605a47"
@@ -106,3 +106,8 @@ envelope exited 0. The founder fills the real values as version 2 in the
 OpenBao UI. This task closes once that is done. No reader policy exists for the
 path; a reader is requested through a railiance-platform CCR when a workload
 needs it.
+
+2026-10-09: done. The founder filled in the real values as version 2 through
+the OpenBao UI. ops-warden did not read or verify any value. Further supplier
+accounts follow the same playbook; existing workload and rein readers move only
+when each reader is retargeted.