diff --git a/sso-mfa/bootstrap/creds-state.yaml b/sso-mfa/bootstrap/creds-state.yaml
index 78d08f0..eea4485 100644
--- a/sso-mfa/bootstrap/creds-state.yaml
+++ b/sso-mfa/bootstrap/creds-state.yaml
@@ -9,12 +9,12 @@ agent_mode: true               # NK-WP-0005: fully automated
 # Phase tracking
 age_key_present: true
 secrets_generated: true
-ops_bundle_created: false      # age-encrypted bundle created
-ops_bundle_location: null      # path or storage hint
+ops_bundle_created: true
+ops_bundle_location: "/home/tegwick/net-kingdom/ops-bundle-20260321T114353.tar.age"
 
 # Emergency bundle
-emergency_bundle_delivered: false   # human confirmed receipt
-emergency_bundle_delivered_at: null
+emergency_bundle_delivered: true   # human confirmed receipt
+emergency_bundle_delivered_at: "2026-03-21T12:09:34+00:00"
 
 # Cluster injection (per-component)
 secrets_applied:
diff --git a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age
index b92257d..07426ae 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age and b/sso-mfa/bootstrap/secrets.enc/authelia/secrets.env.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age
index 95a202e..1e291cb 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age and b/sso-mfa/bootstrap/secrets.enc/breakglass/secrets.env.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age b/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age
index 14974b2..d4b9448 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age and b/sso-mfa/bootstrap/secrets.enc/keycape/key.pem.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age b/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age
index 68bbc1d..60b66ae 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age and b/sso-mfa/bootstrap/secrets.enc/keycape/pi_admin_token.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age
index 34ff669..662c0b0 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age and b/sso-mfa/bootstrap/secrets.enc/keycape/secrets.env.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age
index abc7c82..56ca13d 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age and b/sso-mfa/bootstrap/secrets.enc/lldap/secrets.env.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
index 9fb2d29..c889ca9 100644
--- a/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
+++ b/sso-mfa/bootstrap/secrets.enc/postgres/secrets.env.age
@@ -1,7 +1,6 @@
 age-encryption.org/v1
--> X25519 7CYGCOGZMX0URMRuP5ar6HMJDQaqn76j0zU5QDNAp00
-dh6oXOjqoXPSk8Nz7IXh4tisnwrjCaH0Eq5GMzfEHRA
---- 04+n4fOdmVm56ppvsPCm1lFAR5rh1bA9OPU52/a/Xi0
-%���i�
-��j5W��;��"W��-as�!ggX����䜞�g�?�U����o�X��� ���?_�XW� N罻�?�Q�}Yh8
-(!%���lt]��L����X^�:�)�)(��K�lQ�_ ��H�3�V*����T _��EGZF���Ѧ��,��*��\�|
���M*Xq�#��%��U9��aP�[gw��%�'����z�'L/�|��{>Y�b�V��JQ�wࢪ�����q�I�����Dׇm	<���XD��Ogw��J�w�z�������t���׬��s+S�|����K��m��Bսam�����9P�8|MYU���a�@	��u8s�UGk]e���Q_y�9�2/qSON冶T`M�LN���k�����ڔ�WE�6�5���¿��|x~�s\���1ݮL�B�	���b�
\ No newline at end of file
+-> X25519 kExJAWtVGvgFWlJYN4CHtAVR1qgGWJJoVHK9iGlHWBU
+q2rD2knTb10kp3fwmh4Nc+eh1rF2EbGxMZ8nEsCVRN4
+--- RU524a7cQWZEq0yAUDGgA30ek91raZ2B/RxkUJoyEw8
+o�,
{��N�"-Ժ�}qI��|&T�A%,��-[!���f�zs�� U�S3����D&E��2�prT��/X��G�S�3O��(������o;wL�B���m>t��3����F�9�&��,evZ��\#�m����|��L��
+YD�Z��d��8fZ���胂��Nw��B'�G8���O]�e;3.A���r��Ԗ���a5D51]�'g�"`z?�3K�>�!����O��j�A��y+�ߓ$8�k֟d�t�z4����l�+D������Ar����'��$Ǚ��	�����Ny�K���%���;���#|�͊��"U��A5���$8�S�c��=���,�)
��CZr�.:Ȱ�!,�%'���›:�]O�"�L4y@w�.�Y5�9Ka��n�E3ն���i*X�&���ჲ�$62�*�s&J9
\ No newline at end of file
diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age
index 3a01113..acb57d1 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age and b/sso-mfa/bootstrap/secrets.enc/privacyidea/pi.enc.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age
index 5246bb5..a21323a 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age and b/sso-mfa/bootstrap/secrets.enc/privacyidea/private.pem.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age
index cbf23e3..3ee0710 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age and b/sso-mfa/bootstrap/secrets.enc/privacyidea/public.pem.age differ
diff --git a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age
index 976e61f..bb5be21 100644
Binary files a/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age and b/sso-mfa/bootstrap/secrets.enc/privacyidea/secrets.env.age differ