diff --git a/workplans/FORGE-WP-0006-independent-secret-detection.md b/workplans/FORGE-WP-0006-independent-secret-detection.md
index 5c78a7b..a1dbc45 100644
--- a/workplans/FORGE-WP-0006-independent-secret-detection.md
+++ b/workplans/FORGE-WP-0006-independent-secret-detection.md
@@ -8,7 +8,7 @@ status: active
 owner: codex
 topic_slug: railiance
 created: "2026-10-12"
-updated: "2026-10-12"
+updated: "2026-10-13"
 flavor: implementation
 depends_on: []
 state_hub_workstream_id: "69458fdc-d727-5391-b88b-d03da0afe24e"
@@ -57,7 +57,7 @@ status does not count as a successful secret-detection test.
 
 ```task
 id: FORGE-WP-0006-T02
-status: todo
+status: progress
 priority: high
 state_hub_task_id: "210e7935-944a-5720-b356-18b48a68aa5e"
 ```
@@ -72,6 +72,20 @@ unavailable-scanner refusal, quarantine cleanup, unchanged authorization and
 other hook behavior. Native acceptance must include SSH/HTTP/frontend creation
 and merge paths plus restart/hook regeneration. Keep a missing proof open.
 
+2026-10-13 recovered activation: exact binaries were admitted by the October 12
+isolated native probe and then installed with additive hooks on the 22 reviewed
+repositories under FORGE6-RECEIVE-ACTIVATION-001. The actual SSH clean/secret probes
+passed their respective scanner-result checks under a temporary independent veto;
+refs and rejected quarantined commits were absent, the veto was removed and
+health remained passing. A fresh October 13 read-only recheck confirms the same
+pod/image, exact installed binaries and all hook hashes, with original hooks
+preserved. Custodian receipts: `docs/evidence/2026-10-12-netkingdom-security/receive-hook-activation.json`
+and `docs/evidence/2026-10-13-netkingdom-security/receive-profile-recheck.json`.
+Metadata now reconciles 165 database repositories to 165 directories; 143 remain
+outside this activation. T02 stays progress: ordinary clean acceptance,
+HTTP/frontend writes, restart/regeneration and new-repository reconciliation
+remain native acceptance gates. No full coverage or owner approval is inferred.
+
 ## Verify CI independence, detection response and complete coverage
 
 ```task