diff --git a/intakes/intakes.md b/intakes/intakes.md
index d8ad34b..a5107c2 100644
--- a/intakes/intakes.md
+++ b/intakes/intakes.md
@@ -144,8 +144,17 @@ notes: 'REVIEWED 2026-09-21; one change made, one deliberately not made.
   Related and unresolved: WARDEN-WP-0039-T03 already waits on the credential proxy''s
   admitted policy binding, which is the same resource.system field seen from the
   delegated-read side. The rename must not be allowed to answer that question by
-  accident.'
+  accident.
+
+
+  RENAME LANDED 2026-09-30 (flex-auth msg 2026-09-30; access-engine head b943d9a).
+  Verified after the landing: warden route find resolves flex-auth-policy-check under
+  both "access-engine" and "flex-auth" keywords; no catalog edit was required. The
+  open question above is answered by FLEX-DEC-2026-013 (runtime names, including the
+  policy resource.system string, stay flex-auth), so owner_repo/subsystem stay
+  flex-auth until the runtime name changes. If flex-auth intends otherwise it must
+  say so explicitly. Intake stays open for the owner to close.'
 created: '2026-09-21T00:00:00Z'
-updated: '2026-09-21T00:00:00Z'
+updated: '2026-09-30T00:00:00Z'
 state_hub_intake_id: "01a0c153-98e1-7705-bf82-a58c85df980f"
 ```