diff --git a/.custodian-brief.md b/.custodian-brief.md
index 40514c8..9cc4a0d 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — sand-boxer
 
 **Domain:** infotech  
-**Last synced:** 2026-10-13 20:56 UTC  
+**Last synced:** 2026-10-14 00:16 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -19,7 +19,7 @@ Progress: 5/6 done  |  workplan_id: `d3f12387-fd23-58f0-b979-9c811507614d`
 
 **Open tasks:**
 - ! Resolve Claude credentials, enforced egress, and production acceptance  `58817ef6`
-  *(wait: EUR10 reconciled and retry envelope authorized 2026-10-13; rein-aharness must install/admit corrected runtime ee3d0a53 on railiance01 (pin + offline startup proof) and record the one authorized successful owner-runtime acceptance.)*
+  *(wait: Tracked as REINAH-WP-0008-T07 (owner, attended): accept spend memo infd-20261014-b01 (up to three attempts within EUR 10, observed-usage settlement), rebuild/install ee3d0a53 on railiance01, rehearse, renew, then a successful attempt.)*
 
 ## Inbox Hygiene
 
diff --git a/workplans/SAND-WP-0015-bwrap-runtime-and-private-state.md b/workplans/SAND-WP-0015-bwrap-runtime-and-private-state.md
index 71138c2..4d924a1 100644
--- a/workplans/SAND-WP-0015-bwrap-runtime-and-private-state.md
+++ b/workplans/SAND-WP-0015-bwrap-runtime-and-private-state.md
@@ -364,3 +364,12 @@ attempts within EUR 10 under memo `infd-20261014-b01` (observed-usage
 settlement); order: memo acceptance in the attended informed-decision sitting,
 rebuild and install `ee3d0a53` on railiance01, `metered-once --rehearse`,
 `owner renew`, first attempt. Railiance01 still pins `b6e4e8a4`. T04 stays `wait`.
+
+2026-10-15 owner-approved rebuild: the pinned inputs of the `ee3d0a53` receipt
+(same four commits, uv.lock `8775904b…`, Claude 2.1.266 `19842705…`) rebuilt
+to `818b1b7c8292…f359`. The digest differs only because the builder embeds
+absolute source paths (`direct_url.json`, `build-info.json`). Owner-entrypoint
+startup smoke passed in sandbox `28df7a1d`; no credentials or model calls.
+Sent to rein-aharness (message `8a7962f7`, thread `82faf25c`) to record as the
+then-current corrected runtime for REINAH-WP-0008-T07 and to load the unsigned
+memo sitting. Nothing installed on railiance01. T04 stays `wait`.