diff --git a/docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json b/docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json
new file mode 100644
index 0000000..45f7b30
--- /dev/null
+++ b/docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json
@@ -0,0 +1,48 @@
+{
+  "age_recipient": "age14kg8yh9f82kd53hrsnjynpcnwyv3fx8swhhw627ny5verh70jp4q03ar47",
+  "capture": {
+    "age_identity_on_node": false,
+    "facility_scaled": false,
+    "files": {
+      "events.jsonl": {
+        "bytes": 51382,
+        "present": true
+      },
+      "tickets-outbox.sqlite3": {
+        "bytes": 20480,
+        "present": true
+      },
+      "tickets.sqlite3": {
+        "bytes": 45056,
+        "present": true
+      }
+    },
+    "image": "docker.io/library/mas-live:v0.2-480e69a",
+    "mail_sent": false,
+    "relay_read": false,
+    "volume": "pvc-415825c2-35db-4fc6-b58e-726dbb82c5d3"
+  },
+  "freshness_service": "passed",
+  "identity_custody": "platform/recovery/mas/age-identity v1",
+  "receipt": {
+    "application": "mas",
+    "captured_at": "2026-11-03T07:28:38Z",
+    "ciphertext_bytes": 133352,
+    "ciphertext_sha256": "d2f287ed65114e618ab2e6605f551d362152ef9d8aa231d1ce9206588dcfdb91",
+    "destination": "s3://railiance-platform-pg-backup/platform-pg/application-archives/mas/2026/11/03/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age",
+    "immutable_create": true,
+    "multipart_completed": true,
+    "object_key": "platform-pg/application-archives/mas/2026/11/03/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age",
+    "remote_retrieval_verified": true,
+    "retained_objects_deleted": false,
+    "run": "20261103T072837Z",
+    "schema": "platform.application-primary-archive.v1",
+    "status": "offsite_fetched_verified",
+    "version_id": "1793690919900126"
+  },
+  "runner": "attended: founder replaced /etc/mas-backup/age-recipient (sha256 0b912f12\u2026eace) and started mas-evidence-backup.service and mas-evidence-freshness.service on railiance01",
+  "schema": "platform.mas-evidence-offsite.v1",
+  "task": "RPF-WP-0070-T04",
+  "values_recorded": false,
+  "workplan": "RPF-WP-0070"
+}
diff --git a/workplans/RPF-WP-0070-mas-evidence-recovery.md b/workplans/RPF-WP-0070-mas-evidence-recovery.md
index 1e6f826..8bd91be 100644
--- a/workplans/RPF-WP-0070-mas-evidence-recovery.md
+++ b/workplans/RPF-WP-0070-mas-evidence-recovery.md
@@ -295,6 +295,14 @@ recipient is `age14kg8yh9f82kd53hrsnjynpcnwyv3fx8swhhw627ny5verh70jp4q03ar47`,
 and `deploy/mas-backup/age-recipient` now holds it. Receipt:
 `docs/evidence/mas-evidence-age-escrow-2026-11-03.json`.
 
+2026-11-03 07:28Z: the founder replaced `/etc/mas-backup/age-recipient` on
+the node (hash checked) and ran one backup and one freshness check. Both
+passed. Object `…/20261103T072838Z-59beea09bd26b811ffa169a4.tar.age` is
+at version `1793690919900126`, 133352 bytes, SHA256 `d2f287ed…db91`,
+sealed to the custody-held recipient, with the readback verified.
+Receipt: `docs/evidence/mas-evidence-offsite-2026-11-03-custody-recipient.json`.
+The T04 rehearsal runs against this object.
+
 ## Escrow the age identity and get owner acceptance
 
 ```task