diff --git a/declarations/rapp.yaml b/declarations/rapp.yaml
index d6890bd..7856e62 100644
--- a/declarations/rapp.yaml
+++ b/declarations/rapp.yaml
@@ -4,7 +4,7 @@ rapp_id: rapp-canned-prompts
 repo: rapp-canned-prompts
 ownership_repo: canned-prompts
 contract_version: 1.0.0
-readiness_state: deployed
+readiness_state: verified
 workload_identity:
   name: canned-prompts
   package_type: manifest-managed-platform-service
diff --git a/docs/evidence/RCP-WP-0002-T04-lease-rotation-2026-09-08.log b/docs/evidence/RCP-WP-0002-T04-lease-rotation-2026-09-08.log
new file mode 100644
index 0000000..3309b66
--- /dev/null
+++ b/docs/evidence/RCP-WP-0002-T04-lease-rotation-2026-09-08.log
@@ -0,0 +1,17 @@
+started 2026-09-08T10:09:16+02:00 — 12m watch (runtime lease TTL 30m)
+2026-09-08T10:09:16+02:00 ready=1/1
+2026-09-08T10:10:23+02:00 ready=1/1
+2026-09-08T10:11:26+02:00 ready=1/1
+2026-09-08T10:12:32+02:00 ready=1/1
+2026-09-08T10:13:38+02:00 ready=1/1
+2026-09-08T10:14:44+02:00 ready=1/1
+2026-09-08T10:15:50+02:00 ready=1/1
+2026-09-08T10:16:56+02:00 ready=1/1
+2026-09-08T10:18:02+02:00 ready=1/1
+2026-09-08T10:19:05+02:00 ready=1/1
+2026-09-08T10:20:11+02:00 ready=1/1
+finished 2026-09-08T10:21:18+02:00
+samples=11 not_ready=0 query_failed=0
+kubelet readiness 503s in window: 0 (probe every 5s)
+pod started 2026-09-08T06:59:48Z, restarts=0
+RESULT: survived — continuously ready past the lease TTL
diff --git a/workplans/RCP-WP-0002-first-deployment.md b/workplans/RCP-WP-0002-first-deployment.md
index e7ef435..81483cf 100644
--- a/workplans/RCP-WP-0002-first-deployment.md
+++ b/workplans/RCP-WP-0002-first-deployment.md
@@ -147,7 +147,7 @@ re-run ownership reconciliation. Notified.
 
 ```task
 id: RCP-WP-0002-T04
-status: progress
+status: done
 priority: high
 state_hub_task_id: "6d9eb97c-57e2-5b74-b6eb-455076713417"
 ```
@@ -171,10 +171,16 @@ kept the file current; the engine held the URL it booted with. Fixed in 0.1.5 by
 re-reading the credential for every new connection, with `pool_recycle` inside
 the lease TTL.
 
-`readiness_state` is back to `deployed`. The bar for `verified` is now
-observation across a full lease rotation, because a smoke run inside the first
-window cannot tell a service that works from one that works *once* — an
-availability property is not provable by a single sample.
+`readiness_state` was returned to `deployed`, and is now **`verified`** on
+evidence: continuously ready across a full lease rotation, zero readiness
+failures, no restarts. Log at
+`docs/evidence/RCP-WP-0002-T04-lease-rotation-2026-09-08.log`.
+
+The bar for `verified` is observation across a rotation, because a smoke run
+inside the first window cannot tell a service that works from one that works
+*once* — an availability property is not provable by a single sample. It took
+three attempts to build an instrument that could return that verdict honestly;
+all three failures are recorded in the evidence file.
 
 **The check that could never have passed.** `live-image-digest-match` read the
 pin with a line-offset `grep`, which returned empty once comments were added