diff --git a/workplans/CORE-WP-0004-interhub-compatibility-and-consumer-smoke.md b/workplans/CORE-WP-0004-interhub-compatibility-and-consumer-smoke.md
index 8979de1..38c1c55 100644
--- a/workplans/CORE-WP-0004-interhub-compatibility-and-consumer-smoke.md
+++ b/workplans/CORE-WP-0004-interhub-compatibility-and-consumer-smoke.md
@@ -42,7 +42,7 @@ Result 2026-06-27: Replaced placeholders with persistence-backed protected route
 
 ```task
 id: CORE-WP-0004-T03
-status: wait
+status: done
 priority: high
 state_hub_task_id: "2d18f575-135b-4ba8-9537-6920d0c61e1b"
 ```
@@ -69,3 +69,27 @@ implemented and locally proved the direct activity-core -> Core Hub
 interaction-event sink. This removes the consumer implementation blocker;
 this task still waits for a deployed Core Hub runtime plus approved runtime
 token and widget mapping before it can be marked done.
+
+
+## Progress 2026-07-02 — deployed staging smoke passed
+
+Core Hub staging is live on the CoulombCore cluster (operator-approved
+decision set: CoulombCore + generated staging Secrets + Gitea registry):
+namespace `core-hub-staging`, image `gitea.coulomb.social/coulomb/core-hub:3ed8531`,
+dedicated `core_hub_staging` database on apps-pg (namespace labeled
+`railiance.io/postgres-client=apps-pg` to satisfy the default-deny
+NetworkPolicy), Alembic migrate job `Completed`, API rolled out healthy.
+
+T03 closed: `core_hub_deployed_smoke` ran in-cluster (token via
+`secretKeyRef`, never leaving the namespace) — run `20260702143544-6c8f18`,
+`ok=true`, 10/10 checks (health, ready, OpenAPI, four public catalogs,
+protected-401s, operator auth) plus the full ops-hub bootstrap sequence:
+hub `6798723a`, activated manifest, API consumer key prefix `ch_N0ZhsXIbD`,
+widget, interaction event `21d09f99` (`ops-endpoint-verified`), hub registry
+containing both. Two fixes landed en route: `psycopg2-binary` added to main
+deps (migrations image lacked the sync driver — commit `3ed8531`) and the
+NetworkPolicy label requirement documented above.
+
+T04 remaining (unchanged owner): run the ACTIVITY-WP-0017 activity-core sink
+against this deployed staging API with an approved runtime token and widget
+mapping. The deployed-runtime precondition is now met.