diff --git a/workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md b/workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
index d577111..875fbdd 100644
--- a/workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
+++ b/workplans/SECRETS-WP-0012-keycape-openbao-consumer-custody.md
@@ -93,7 +93,7 @@ status: wait
 needs_human: true
 priority: high
 blocked_on: founder
-blocking_reason: "All upstream objects are live: CCR-2026-0033 applied, KeyCape registration live (KEY-WP-0037), CCR-2026-0038 JWT mount keycape-services / role secrets-engine-openbao applied 2026-10-08 (railiance-platform 1b36e14). Founder writes the non-secret local login contract file and runs the attended probe-openbao command in docs/keycape-openbao-consumer-custody.md."
+blocking_reason: "All upstream objects are live: CCR-2026-0033 applied, KeyCape registration live (KEY-WP-0037), CCR-2026-0038 JWT mount keycape-services / role secrets-engine-openbao applied 2026-10-08 (railiance-platform 1b36e14). Probe input ~/.secrets-engine/keycape/openbao-jwt-login.yaml written 2026-10-09 with founder approval (mode 0600, parsed by the engine loader; allowed by CCR-2026-0038 as amended in railiance-platform 93a4bc2). Founder runs the attended probe-openbao command in docs/keycape-openbao-consumer-custody.md."
 state_hub_task_id: "1c3afd34-4aa3-5484-a9c7-2db577225269"
 ```