diff --git a/findings/RISK-F-0015-emergent-claude-owner-routing.md b/findings/RISK-F-0015-emergent-claude-owner-routing.md
index 5c66e66..cd210f1 100644
--- a/findings/RISK-F-0015-emergent-claude-owner-routing.md
+++ b/findings/RISK-F-0015-emergent-claude-owner-routing.md
@@ -23,8 +23,8 @@ fidelity_modifier: false
 production_rescore: false
 disclosure: public
 escalation: none
-last_checked: "2026-10-03T19:12:04Z"
-next_check: "2026-10-03T19:12:04Z"
+last_checked: "2026-10-03T20:47:08Z"
+next_check: "2026-10-03T20:47:08Z"
 cadence: instant
 clean_streak: 0
 checked_by: "grok/risk-nexus"
@@ -212,3 +212,29 @@ met.
 - **2026-10-03** — filed and graded from reporter evidence and owner tracking.
   Initial filing/movement; cadence remains instant, with no clean rung earned.
 - **2026-10-03** — not clean: 0.2.4 Claude zones route is zone-engine; model-switch is delegator, not fixture session-owner, and omits glas-harness. T07 still wait and has not accepted. Stays open. Cadence instant → instant; checked again immediately.
+- **2026-10-03** — not clean: sealed 0.2.6 two-case rerun has Codex, Claude, and Grok name zone-engine for zones and glas-harness for model-switch. The fixture role label session-owner is still unused. The rerun is not a full corpus and T07 has not accepted it. Stays open. Cadence instant → instant.
+
+## Review — 2026-10-03: sealed knowledge 0.2.6 two-case rerun
+
+Status stays `open`. The closure condition is not met.
+
+The rerun is Codex, Claude, and Grok on `zones` and `model-switch` only,
+package 0.2.6 digest
+`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`,
+commit `f65d0e64bc710eafb1dac4dd64b05516493d8c31`. Evidence is
+`emergent-security/docs/evidence/2026-10-03-026-route-rerun.md`. Each review
+is an implementing Grok session, not an independent Whitehat principal.
+
+Zones: all three routes are `zone-engine`. Each denies a live authorization
+endpoint. Grok no longer names `pep-owner` for this question.
+
+Model-switch: all three routes are `glas-harness`, not fixture
+`session-owner`, and not the 0.2.4 `delegator` label. Each says the earlier
+receipt carries no authority and requires a reload. Claude's sources are
+`glas-harness` only. Codex adds `emergent-security`. Grok also adds
+`access-engine`.
+
+Both closure conjuncts remain unmet. The fixture role label is not the
+recorded route, the corpus is two cases, and `EMERGENT-WP-0002-T07` is still
+`wait`. Severity stays low `I1` × `L3`. Disclosure stays `public`.
+Escalation stays `none`.