diff --git a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
index 56acc3f..1f1a3a6 100644
--- a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
+++ b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
@@ -377,3 +377,18 @@ deprecation marker references it. No runtime rebuild is needed. This was a stati
 check of the binary, not a provider request. The first real call is still
 the attended exec. Remaining model work: a glas-harness profile change from
 `claude-sonnet-4-6` to `claude-sonnet-5`, reviewed as a new compatibility set.
+
+### 2026-09-23 Sonnet 5 runtime placed
+
+Operator chose a 1.1.1 bump. glas-harness `30be818` adds
+`harness.agent-dev-local@1.1.1` (`claude-sonnet-5`) and blocks 1.1.0. rein-aharness
+`fdc07ee` pins it in the runtime contract lock (llm-connect `37436bb`, workplan-only).
+Owner runtime `b6e4e8a429393d68831c996a65c0489664205df969ac9882e581983ec2da4969`
+(Claude CLI 2.1.266) is installed on railiance01 beside `2cfc7b5f` and `5371156d`
+(rollback). Synthetic metered proof passes locally and on railiance01 (one fake
+provider request, zero on refusal, artifact unchanged). Receipt:
+`prj-helixforge-factory/evidence/2026-09-23-runtime-placement.json`. The
+`exec_owner` argv and the owner config `runtime` block will use `b6e4e8a4`, and
+`messages_policy.model` will be `claude-sonnet-5`. Next: private SpendPolicy, ledger
+`spend init` and owner config on railiance01 (HFACT-WP-0001-T01/T04).
+No credential, approval, profile activation or worker change.