diff --git a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
index bbccc9a..dc3bede 100644
--- a/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
+++ b/workplans/RPF-WP-0015-audit-core-custody-and-recovery-coordination.md
@@ -5,6 +5,7 @@ title: "Coordinate audit-core temporary custody and recovery exercises"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 topic_slug: railiance
 created: "2026-08-22"
diff --git a/workplans/RPF-WP-0025-openbao-operator-only-access.md b/workplans/RPF-WP-0025-openbao-operator-only-access.md
index 3b8527b..89daf33 100644
--- a/workplans/RPF-WP-0025-openbao-operator-only-access.md
+++ b/workplans/RPF-WP-0025-openbao-operator-only-access.md
@@ -5,6 +5,7 @@ title: "Retract public OpenBao listener behind operator-only access"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 topic_slug: railiance
 created: "2026-08-23"
diff --git a/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md b/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md
index c6efab8..19e595a 100644
--- a/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md
+++ b/workplans/RPF-WP-0027-keycape-live-secret-exposure-recovery.md
@@ -5,6 +5,7 @@ title: "Coordinate KeyCape live Secret exposure recovery"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 topic_slug: railiance
 created: "2026-08-23"
diff --git a/workplans/RPF-WP-0029-backup-credential-default-removal.md b/workplans/RPF-WP-0029-backup-credential-default-removal.md
index a124f7b..e5e4d6d 100644
--- a/workplans/RPF-WP-0029-backup-credential-default-removal.md
+++ b/workplans/RPF-WP-0029-backup-credential-default-removal.md
@@ -5,6 +5,7 @@ title: "Remove backup credential default and verify governed replacement"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-06"
diff --git a/workplans/RPF-WP-0035-credential-lane-implementation.md b/workplans/RPF-WP-0035-credential-lane-implementation.md
index 5b86835..e0e22a8 100644
--- a/workplans/RPF-WP-0035-credential-lane-implementation.md
+++ b/workplans/RPF-WP-0035-credential-lane-implementation.md
@@ -5,6 +5,7 @@ title: "Implement reviewed credential lanes with separate owner gates"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-11"
diff --git a/workplans/RPF-WP-0036-platform-service-assurance.md b/workplans/RPF-WP-0036-platform-service-assurance.md
index 8d532a2..5d9cc91 100644
--- a/workplans/RPF-WP-0036-platform-service-assurance.md
+++ b/workplans/RPF-WP-0036-platform-service-assurance.md
@@ -5,6 +5,7 @@ title: "Close S3 service assurance and ownership gaps"
 domain: financials
 repo: railiance-platform
 status: blocked
+flavor: implementation
 owner: codex
 created: "2026-09-05"
 updated: "2026-09-06"
diff --git a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md
index f29cdd3..f819e52 100644
--- a/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md
+++ b/workplans/RPF-WP-0038-forgejo-scaleway-primary-coverage.md
@@ -5,6 +5,7 @@ title: "Close Forgejo primary backup coverage on Scaleway"
 domain: financials
 repo: railiance-platform
 status: active
+flavor: implementation
 owner: codex
 created: "2026-09-06"
 updated: "2026-09-06"