diff --git a/workplans/KEY-WP-0002-container-image-gitea.md b/workplans/KEY-WP-0002-container-image-gitea.md
index f153880..e6350ed 100644
--- a/workplans/KEY-WP-0002-container-image-gitea.md
+++ b/workplans/KEY-WP-0002-container-image-gitea.md
@@ -4,11 +4,11 @@ type: workplan
 title: "KeyCape Container Image — Build & Publish to Gitea OCI Registry"
 domain: netkingdom
 repo: key-cape
-status: active
+status: done
 owner: netkingdom
 topic_slug: netkingdom
 created: "2026-03-22"
-updated: "2026-03-22"
+updated: "2026-03-21"
 capability_request_id: ""
 state_hub_workstream_id: "c8843c7a-460a-47a2-b45a-b8d3940f9aa2"
 ---
@@ -156,7 +156,7 @@ Gate: workflow file is syntactically valid; documented in README.
 
 ```task
 id: KEY-WP-0002-T03
-status: todo
+status: done
 priority: high
 state_hub_task_id: "2dde67f9-944f-418d-a2e9-7367bc556425"
 ```
@@ -173,7 +173,7 @@ Gate: image pull from within the cluster succeeds without TLS errors.
 
 ```task
 id: KEY-WP-0002-T04
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "25775e10-3164-4adb-9c41-835c86fde5f8"
 ```
@@ -195,7 +195,7 @@ secret is in the credential store.
 
 ```task
 id: KEY-WP-0002-T05
-status: todo
+status: done
 priority: medium
 state_hub_task_id: "0f6ab38f-6d34-41af-9180-f19c687947b5"
 ```