diff --git a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md
index 03c0706..9e224c4 100644
--- a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md
+++ b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md
@@ -145,6 +145,16 @@ through approved runtime references, implement backups/restore evidence, and
 document rollback and zero-downtime upgrade expectations. Browser state must
 never become authoritative.
 
+2026-07-29 increment: the runtime now exposes protected Prometheus readiness
+and aggregate record metrics, rejecting requests without the trusted workload
+marker. NetKingdom deployed a daily atomic Postgres custom-format backup with
+catalog/checksum verification and retention, then restored it into an isolated
+ephemeral PostgreSQL instance and verified four public tables plus the schema
+ledger. A reversible live rollout gate proved rollback to the retained prior
+image and restoration of `user-engine:portal-2bcda7f`. The remaining
+production gaps are off-node backup custody and approved registry publication,
+so this task remains in progress.
+
 ## T06 - Security, accessibility, and workflow conformance
 
 ```task