diff --git a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
index 9016b3b..85cbb59 100644
--- a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
+++ b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
@@ -346,3 +346,21 @@ Intermediate `95c9edb1` is installed but refused: a sandboxer bwrap info-fd
 partial-read race, fixed in `221126c`. Receipt: prj-helixforge-factory
 `evidence/2026-09-22-runtime-placement.json`. The exec_owner argv will use
 `2cfc7b5f`. Next: B3 fixture repo, repository grant, ActivityDefinition, worker id.
+
+### 2026-09-23 B3 scope correction and model choice
+
+Operator chose `claude-sonnet-5` for MessagesOwner and a throwaway fixture repo
+with no remote. Reading the owner contracts corrected the B3 framing above:
+
+- The Glas acceptance run (`glas-harness/docs/local-profile-acceptance.md`,
+  `scripts/prove-local-profile.py`) creates its own disposable fixture repo
+  (one `PROOF.md`, one local commit, no push remote). No repo is pre-created.
+- That path runs with `--no-metrics` and carries no repository grant, so it
+  needs no grant, ActivityDefinition or queue worker id. Those belong to the
+  Activity Core queue loop (HFACT-WP-0001-T05), not to this first run.
+- The candidate `harness.agent-dev-local@1.1.0` pins `claude-sonnet-4-6`.
+  Moving to `claude-sonnet-5` is a glas-harness profile change, reviewed as a
+  new compatibility set, and must be checked against the pinned Claude CLI
+  2.1.263 in runtime `2cfc7b5f` before the attended run.
+
+No repo, grant, definition, credential or approval was created.