diff --git a/sso-mfa/WORKPLAN.md b/sso-mfa/WORKPLAN.md
index 7d058c7..e070d66 100644
--- a/sso-mfa/WORKPLAN.md
+++ b/sso-mfa/WORKPLAN.md
@@ -45,8 +45,8 @@ Hostnames: kc.coulomb.social (KeyCape), auth.coulomb.social (Authelia), lldap.co
 - [x] Update bootstrap/gen-secrets.sh (removed Keycloak, added LLDAP/Authelia/KeyCape sections)
 - [x] Update k8s/README.md (network policy table)
 - [x] Replace verify-t05.sh (Keycloak → LLDAP+Authelia+KeyCape checks)
-- [ ] Commit all changes
-- [ ] Update state hub tasks
+- [x] Commit all changes — commit 0754dc3
+- [x] Update state hub tasks — T05 marked done, milestone event logged
 
 ### Done-criteria for T05
 - All manifests present and consistent