diff --git a/docs/openrouter-native-access.md b/docs/openrouter-native-access.md
index 17f179b..700ed14 100644
--- a/docs/openrouter-native-access.md
+++ b/docs/openrouter-native-access.md
@@ -86,6 +86,8 @@ state their scope and cleanup. This removes the outdated PDP image dependency.
 The finalized request artifacts are `docs/evidence/2026-09-14-openrouter-final-*-request.json`.
 They replace the earlier pending-recipient proposal as review inputs, not as an
 issued approval. Recipient proof is in `2026-09-14-openrouter-recipient-install.json`.
-The exact operator-group question is pending user input. Native requesting
+The operator confirmed `net-kingdom-admins` on 2026-09-14; CCR-2026-0019 now
+records the live binding. Attended apply/readback passed; scoped credential
+delivery verification remains pending. Native requesting
 identity (`approval:create`) and Informed Decision human review are also needed;
 do not reuse the withdrawn combined operator client or seed a production approval.
diff --git a/workplans/SECRETS-WP-0010-openrouter-native-access.md b/workplans/SECRETS-WP-0010-openrouter-native-access.md
index 99406bc..c321e88 100644
--- a/workplans/SECRETS-WP-0010-openrouter-native-access.md
+++ b/workplans/SECRETS-WP-0010-openrouter-native-access.md
@@ -88,9 +88,14 @@ Runtime trust is the system-owned Python standard library plus pinned executable
 and script. The install receipt and finalized apply/verify/exec request JSONs are
 under docs/evidence. No provider request or credential read was made.
 
-Current wait: user input naming the exact authorized KeyCape operator group for
-CCR-2026-0019 (asked during this continuation; not inferred from unrelated admin
-roles). Then complete the scoped OIDC reader and admitted native delivery.
+Operator input received, 2026-09-14: the user explicitly selected
+`net-kingdom-admins` for CCR-2026-0019. The platform source now records that
+binding and the approved metadata apply. The guarded applier requires role
+`secrets-engine-approval-client-workload-kv-read`; its dry run passes.
+Attended apply/readback passed: exact group, policy and 900-second TTL verified.
+Warden completed its contained session successfully. Platform receipt:
+`docs/evidence/2026-09-14-ccr0019-operator-binding.json`. Native scoped delivery
+proof remains pending; no credential was read and the front door stays disabled.
 A separately admitted approval:create requester and real human approver flow
 also remain necessary: the withdrawn approval-engine-operator convenience client
 must not be restored or used to create and approve its own requests. Informed