diff --git a/docs/evidence/2026-10-10-operators-nextcloud-retire.json b/docs/evidence/2026-10-10-operators-nextcloud-retire.json
new file mode 100644
index 0000000..818ab3a
--- /dev/null
+++ b/docs/evidence/2026-10-10-operators-nextcloud-retire.json
@@ -0,0 +1,52 @@
+{
+  "actor": "founder",
+  "date": "2026-10-10",
+  "decision": "founder 2026-10-10: operators/nextcloud is a deprecated credential",
+  "note": "Receipts copied verbatim (no values). A repeated dry-run with an existing receipt path was refused before any action.",
+  "receipts": {
+    "dry_run": {
+      "entry": "operators/nextcloud",
+      "entry_before": {
+        "current_version": 2,
+        "versions": 2
+      },
+      "exit_code": 0,
+      "mode": "dry-run",
+      "outcome": "dry_run_would_retire",
+      "policy_deleted": true,
+      "schema": "platform.operators-entry-retire.v1",
+      "sibling": "operators/nextcloud/backup",
+      "sibling_before": {
+        "current_version": 2,
+        "versions": 2
+      },
+      "token_revoked": true,
+      "value_reads": 0
+    },
+    "retire": {
+      "entry": "operators/nextcloud",
+      "entry_before": {
+        "current_version": 2,
+        "versions": 2
+      },
+      "entry_deleted": true,
+      "exit_code": 0,
+      "mode": "retire",
+      "outcome": "retired",
+      "policy_deleted": true,
+      "schema": "platform.operators-entry-retire.v1",
+      "sibling": "operators/nextcloud/backup",
+      "sibling_after": {
+        "current_version": 2,
+        "versions": 2
+      },
+      "sibling_before": {
+        "current_version": 2,
+        "versions": 2
+      },
+      "token_revoked": true,
+      "value_reads": 0
+    }
+  },
+  "schema": "platform.evidence.operators-nextcloud-retire.v1"
+}
diff --git a/workplans/ADHOC-2026-10-10.md b/workplans/ADHOC-2026-10-10.md
index ef8bdd8..5a0a5e8 100644
--- a/workplans/ADHOC-2026-10-10.md
+++ b/workplans/ADHOC-2026-10-10.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Retire the deprecated operators/nextcloud credential"
 domain: financials
 repo: railiance-platform
-status: active
+status: finished
 owner: claude-code
 topic_slug: railiance
 created: "2026-10-10"
@@ -18,8 +18,7 @@ state_hub_workstream_id: "2d2c3bd2-d05b-5adc-9559-4d6bb360b751"
 
 ```task
 id: RPF-WP-ADHOC-2026-10-10-T01
-status: wait
-needs_human: true
+status: done
 priority: low
 state_hub_task_id: "d7b91134-13cf-55b8-9291-14efca9465d6"
 ```
@@ -53,3 +52,10 @@ cat ~/operators-nextcloud-retire.json
 **Done when:** the receipt says `retired`, with `sibling_after` equal to
 `sibling_before`, `token_revoked` and `policy_deleted` true; and ops-mason drops
 `operators/nextcloud` from its custody descriptions.
+
+2026-10-10 done: the founder ran the dry run and then the retirement. Outcome
+`retired`: `operators/nextcloud` (2 versions) was deleted, and
+`operators/nextcloud/backup` is unchanged (v2, 2 versions). The token was
+revoked and the one-shot policy deleted; no value was read. Evidence:
+`docs/evidence/2026-10-10-operators-nextcloud-retire.json`. ops-mason was told
+to drop the entry from its custody descriptions.