diff --git a/workplans/RPF-WP-0035-credential-lane-implementation.md b/workplans/RPF-WP-0035-credential-lane-implementation.md
index 7d111c5..55fe943 100644
--- a/workplans/RPF-WP-0035-credential-lane-implementation.md
+++ b/workplans/RPF-WP-0035-credential-lane-implementation.md
@@ -829,12 +829,11 @@ T08 now explicitly waits for formerly-valid audit-bearer revocation acceptance f
 
 ```task
 id: RPF-WP-0035-T09
-status: wait
-needs_human: true
+status: done
+needs_human: false
 priority: high
 decision_id: 2ab717e1-7881-491e-aed4-28946550c289
 depends_on: []
-blocking_reason: "Waits for founder approvals: A1 ops-mason design (keycape-secrets-engine-openbao-client-custody, MASON-WP-0009); A2 revised CCR-2026-0033 plus sibling operator reader CCR-2026-0034 (platform-owner, key-cape-owner, net-kingdom-owner reviews; bound claims confirmed for both readers incl. groups=net-kingdom-admins and /assurance/level=aal2); A3 the exact custody-child decision id recorded in the CCR-2026-0033 review (not boundary decision 632a8893). secrets-engine D1-D4 are superseded (no consumer copy)."
 state_hub_task_id: "7c753be6-42f1-58a6-a4a4-a7ed686f461f"
 ```
 
@@ -850,6 +849,18 @@ immediately → live issuance check (KEY-WP-0037-T04) → OpenBao JWT role/login
 proof (RPF-WP-0035-T02). Each live step after the custody run needs its own go.
 
 
+2026-10-11 evidence reconciliation: T09's approval obligation is complete.
+Authoritative founder decision 2ab717e1-7881-491e-aed4-28946550c289 is resolved,
+decided by Bernd Worsch at2026-10-06T13:07:18.627943Z, and explicitly covers
+A1 design, A2 CCR33/CCR34 plus owner reviews/bound claims, and A3 one custody run.
+The approval comments in both CCRs record those exact grants; both source records
+are applied. MASON-WP-0009-T02/T03 additionally record the October8 approval/owner-delivery
+reconciliation and reference KeyCape
+`docs/evidence/2026-10-07-secrets-engine-openbao-issuance.json`. Closing this approval task clears
+its obsolete human gate. It grants no new run, credential access, rotation or
+service execution: RPF35T02/T12, MASON9T05 and SECRETS8T06 retain their actual
+native/adoption obligations. Historical per-step exclusions remain above.
+
 ## Retire the approval-engine-operator client delivery and custody (CCR-2026-0018)
 
 ```task