diff --git a/docs/evidence/RMGR-WP-0005-repo-manager-pilot-2026-08-22.md b/docs/evidence/RMGR-WP-0005-repo-manager-pilot-2026-08-22.md
index b63f5fb..b8d9e77 100644
--- a/docs/evidence/RMGR-WP-0005-repo-manager-pilot-2026-08-22.md
+++ b/docs/evidence/RMGR-WP-0005-repo-manager-pilot-2026-08-22.md
@@ -73,11 +73,12 @@ mount containment was not weakened.
 The scoped registrar child returned the broader consistency exit code 1 because
 of the eight intentionally untouched legacy references. It nevertheless created
 and returned the exact target UUID and tasks. Repo Manager commit `e656f7f`
-adds `--repair-workplan` and verifies that exact projection before accepting this
-bounded residual status. In the managed Codex sandbox the child could not create
-`.git/index.lock` for its generated brief; the complete local projection restored
-the brief and pushed consistency commit `4b5e48f`. No authoritative identifier
-file changed during registrar rebuild.
+adds `--repair-workplan` and exact target verification. In the managed Codex
+sandbox the child could not create `.git/index.lock` for its generated brief;
+the complete local projection restored the brief and pushed consistency commit
+`4b5e48f`. Follow-up `8eff8d3` makes this containment explicit: projection-only
+repair restores a generated-brief change but rejects any authoritative-file
+mutation. No authoritative identifier file changed during registrar rebuild.
 
 ## Published implementation
 
@@ -87,6 +88,7 @@ file changed during registrar rebuild.
 - Repo Manager sealed plan: `e52ce3e`
 - Repo Manager file migration: `5de754a`
 - Repo Manager projection-repair wrapper: `e656f7f`
+- Repo Manager projection-only writeback containment: `8eff8d3`
 
 ## Gate after the pilot