diff --git a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
index 8cbba68..9016b3b 100644
--- a/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
+++ b/workplans/SECRETS-WP-0009-glas-claude-native-delivery.md
@@ -333,3 +333,16 @@ parametrized create/attach tools, WSL2 clock-skew fix, review cutover inputs).
 Receipt: informed-decision `docs/evidence/2026-09-21-budget-sitting-accept.json`.
 This approval authorizes spend only; it is not the apply/verify/exec approval.
 Next: step B, SpendPolicy scope fields from the admitted factory profile.
+
+### 2026-09-22 Glas candidate profile and runtime placed (steps B1-B2)
+
+Operator chose the Glas acceptance run (GLAS-WP-0012-T04, disposable fixture)
+as the first use of the envelope. glas-harness `462436b` adds
+`harness.agent-dev-local@1.1.0` (unverified, bwrap-local, empty egress, no
+credential routes, 900 s / 60k tokens / 30 turns / USD 5.00). Owner runtime
+`2cfc7b5f5c03…` (rein `a2149bb`, sandboxer `221126c`) is installed on railiance01
+and passes the synthetic metered proof 4/4; `5371156d` stays for rollback.
+Intermediate `95c9edb1` is installed but refused: a sandboxer bwrap info-fd
+partial-read race, fixed in `221126c`. Receipt: prj-helixforge-factory
+`evidence/2026-09-22-runtime-placement.json`. The exec_owner argv will use
+`2cfc7b5f`. Next: B3 fixture repo, repository grant, ActivityDefinition, worker id.