diff --git a/intakes/intakes.md b/intakes/intakes.md
new file mode 100644
index 0000000..afbdd7a
--- /dev/null
+++ b/intakes/intakes.md
@@ -0,0 +1,27 @@
+# Intake records
+
+## WHYNOT-IN-0001 — Provision a consumer npm-read lane
+
+```yaml
+id: WHYNOT-IN-0001
+kind: intake
+title: "Provision a consumer-install npm-read lane for @whynot/design"
+lane: yellow
+status: open
+origin: residual
+origin_ref: WHYNOT-WP-0003
+priority: medium
+owner: whynot-design
+repo: whynot-design
+description: |
+  WHYNOT-WP-0003-T02 published @whynot/design to the coulomb Forgejo npm
+  registry using the publish lane. A separate read/install token id
+  (whynot-design-npm-read) was never provisioned; the publish token was
+  enough to verify one install.
+
+  Consumers still need an .npmrc token to install from the org registry.
+  Route custody through warden route / OpenBao (railiance-platform). Do
+  not inline a secret in Git, State Hub, or this record.
+created: "2026-08-29"
+updated: "2026-08-29"
+```
diff --git a/workplans/WHYNOT-WP-0003-downstream-consumption.md b/workplans/archived/260829-WHYNOT-WP-0003-downstream-consumption.md
similarity index 97%
rename from workplans/WHYNOT-WP-0003-downstream-consumption.md
rename to workplans/archived/260829-WHYNOT-WP-0003-downstream-consumption.md
index 7181063..12356db 100644
--- a/workplans/WHYNOT-WP-0003-downstream-consumption.md
+++ b/workplans/archived/260829-WHYNOT-WP-0003-downstream-consumption.md
@@ -4,11 +4,11 @@ type: workplan
 title: "Downstream consumption: versioned IR releases + consumer drift-check"
 domain: infotech
 repo: whynot-design
-status: active
+status: finished
 owner: claude
 topic_slug: custodian
 created: "2026-06-27"
-updated: "2026-06-27"
+updated: "2026-08-29"
 state_hub_workstream_id: "d3a6ec16-ac40-5ffb-99e7-07f997e59a4a"
 ---
 
@@ -298,10 +298,11 @@ shape of the heavier mode.
   whynot-design. `drift` is read-only against the package; only `.whynot-design.lock`
   (in the consumer repo) is written.
 
-## Registering this workplan
+## Residuals
 
-After review, register the workstream from `~/state-hub`:
+All nine tasks are done. T09's go/defer decision is already resolved
+(`b7d3d35d`, defer consumer-side contract-parity).
 
-```bash
-make fix-consistency REPO=whynot-design
-```
+Live residual: `WHYNOT-IN-0001` — provision a consumer-install npm-read
+lane. The publish token was enough to verify T02; consumers still need a
+read lane to install from the org registry.