diff --git a/workplans/USER-WP-0040-wave2-resource-right-sizing.md b/workplans/USER-WP-0040-wave2-resource-right-sizing.md
index e063e18..6e85e40 100644
--- a/workplans/USER-WP-0040-wave2-resource-right-sizing.md
+++ b/workplans/USER-WP-0040-wave2-resource-right-sizing.md
@@ -58,3 +58,14 @@ Verification: `kubectl -n <ns> get pod -o jsonpath='{..resources}'` shows the ne
 Rollback: revert the source commit and re-sync/re-apply; the before values in the table above are the rollback target. Keep before/after `kubectl get -o yaml` captures as the receipt.
 
 Single-instance Cluster: the user-engine-pg change restarts PostgreSQL; schedule it with the portal change.
+
+## Prepared 2026-10-22 (wave-2 worker W1b)
+
+Status stays `wait` / `needs_human`. Local commit only: not pushed, not applied. Diff = full owner render vs live (`kubectl diff`, object names and changed key paths only, Secret objects skipped).
+
+- Live source: `rapp-user-engine` (SSA field manager `rapp-user-engine`, `make deploy`). The `net-kingdom/sso-mfa/k8s/user-engine` copy is not the deployed source.
+- Change: rapp-user-engine `35fb38b` (`manifests/runtime.yaml`): portal CPU request 50m -> 5m; Cluster `user-engine-pg` requests 100m/256Mi -> 50m/96Mi. Limits unchanged.
+- Diff: resource fields only (Deployment portal requests.cpu; Cluster spec.resources.requests.cpu/memory).
+- Restart: yes. The single-instance CNPG cluster restarts PostgreSQL.
+- Apply: `cd ~/rapp-user-engine && make deploy` (or render + `kubectl apply --server-side --force-conflicts --field-manager=rapp-user-engine` from the workstation).
+- Note: `make test` has one existing failure, which is a stale digest pin assertion and is not caused by this change.