diff --git a/workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md b/workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
index bfbaa50..c32b4f0 100644
--- a/workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
+++ b/workplans/SECRETS-WP-0011-multi-lane-exec-owner-delivery.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Multi-lane exec-owner delivery"
 domain: infotech
 repo: secrets-engine
-status: proposed
+status: ready
 flavor: implementation
 owner: claude-code
 topic_slug: netkingdom
@@ -22,6 +22,10 @@ also needs the Activity Core worker token to claim its queue row. Operator
 decision 2026-09-23: generalize secrets-engine delivery rather than add a
 rein-side token-file reader.
 
+Operator decisions 2026-09-23: one decision chain per lane (no flex-auth
+package change), and the worker-token lane uses ordinary lane approval, not
+human control, since it only lets a worker claim jobs.
+
 Scope: one exec may deliver fields from more than one cataloged lane into one
 catalog-bound owner. The primary lane stays the one named by `--catalog`;
 the others are companions declared on the primary's `exec_owner`.