diff --git a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md
index f5864bc..d198a25 100644
--- a/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md
+++ b/workplans/RAILIANCE-WP-0029-keycape-live-secret-exposure-recovery.md
@@ -77,6 +77,12 @@ protected interactive inputs, boolean postchecks, replacement-success and
 predecessor-denial evidence, and forward-only abort. T03 is ready for the
 attended run; T04/T05 remain open until that run produces a sanitized receipt.
 
+The operator completed the resolver-only update and received
+`privacyIDEA resolver update: PASS`. Postchecks were not yet run; the operator
+was instructed to stop rather than improvise. NetKingdom has been asked to
+package the complete sequence as one receipt-producing command for the next
+run.
+
 ## T04 — Execute the attended rotation
 
 ```task