diff --git a/.repo-manager/index.json b/.repo-manager/index.json
index 7ccb026..c85dcb6 100644
--- a/.repo-manager/index.json
+++ b/.repo-manager/index.json
@@ -2,9 +2,9 @@
   "schema": "repo_manager.index.v1",
   "slug": "security-canon",
   "repo_root": "/home/worsch/security-canon",
-  "head_sha": "8251f8022d460924a5273eff6ba2fbc181532a25",
-  "observed_at": "2026-09-20T19:34:32.162255Z",
-  "source_fingerprint": "015164818408dfe0982f7abd9be81a04bbf641d2941b9d68a80390e78b8de932",
+  "head_sha": "55b57382ffc60db70eecddb283a880f9a4ac7bbb",
+  "observed_at": "2026-09-20T19:36:23.067664Z",
+  "source_fingerprint": "a1728e9ad28986c53662b1955b58d84f038af9b211c82dba8a8bd23b9c1e9335",
   "source_files": [
     ".repo-classification.yaml",
     "INTENT.md",
@@ -94,7 +94,7 @@
     },
     {
       "kind": "decision",
-      "id": "SEC-DEC-0001",
+      "id": "SECURITY-DEC-2026-001",
       "status": "accepted",
       "title": "SecurityCanon boundary: CARING stays in InfoTechCanon; Auth Mode is architecture-layer vocabulary",
       "source_path": "decisions/decisions.md",
@@ -102,7 +102,7 @@
       "parent_id": null,
       "extra": {
         "record": {
-          "id": "SEC-DEC-0001",
+          "id": "SECURITY-DEC-2026-001",
           "kind": "decision",
           "title": "SecurityCanon boundary: CARING stays in InfoTechCanon; Auth Mode is architecture-layer vocabulary",
           "status": "accepted",
@@ -118,7 +118,7 @@
       "workplan_count": 1,
       "task_count": 7,
       "source": "repo-manager",
-      "emitted_at": "2026-09-20T19:34:32.162320Z"
+      "emitted_at": "2026-09-20T19:36:23.067751Z"
     }
   ]
 }
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index a489381..f1597aa 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -8,11 +8,11 @@
 
 | Kind | ID | Status | Lane | Source |
 | --- | --- | --- | --- | --- |
-| workplan | SECURITY-WP-0001 | active | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T01 | done | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T02 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T03 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T04 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T05 | wait | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T06 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
-| task | SECURITY-WP-0001-T07 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-extraction-plan.md |
+| workplan | SECURITY-WP-0001 | active | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T01 | done | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T02 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T03 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T04 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T05 | cancel | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T06 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
+| task | SECURITY-WP-0001-T07 | todo | — | workplans/SECURITY-WP-0001-bootstrap-and-vocabulary.md |
diff --git a/decisions/decisions.md b/decisions/decisions.md
index b9b6dc4..889276c 100644
--- a/decisions/decisions.md
+++ b/decisions/decisions.md
@@ -1,9 +1,9 @@
 # Decision records
 
-## SEC-DEC-0001 — SecurityCanon boundary: CARING stays in InfoTechCanon; Auth Mode is architecture-layer vocabulary
+## SECURITY-DEC-2026-001 — SecurityCanon boundary: CARING stays in InfoTechCanon; Auth Mode is architecture-layer vocabulary
 
 ```yaml
-id: SEC-DEC-0001
+id: SECURITY-DEC-2026-001
 kind: decision
 title: 'SecurityCanon boundary: CARING stays in InfoTechCanon; Auth Mode is architecture-layer
   vocabulary'
diff --git a/docs/adr-001-securitycanon-boundary.md b/docs/adr-001-securitycanon-boundary.md
index 48f913e..73ff09a 100644
--- a/docs/adr-001-securitycanon-boundary.md
+++ b/docs/adr-001-securitycanon-boundary.md
@@ -1,6 +1,6 @@
 ---
 id: SEC-ADR-001
-decision_record: SEC-DEC-0001
+decision_record: SECURITY-DEC-2026-001
 type: adr
 title: "SecurityCanon boundary: abstraction layers, not content extraction"
 repo: security-canon