diff --git a/wiki/playbooks/reuse-surface-hub-write-token.md b/wiki/playbooks/reuse-surface-hub-write-token.md
index 18cf997..0a9005e 100644
--- a/wiki/playbooks/reuse-surface-hub-write-token.md
+++ b/wiki/playbooks/reuse-surface-hub-write-token.md
@@ -84,7 +84,7 @@ Never paste values into chat, State Hub, workplans, or Git.
    curl -fsS "$REUSE_SURFACE_URL/v1/federated" | jq '.sources | map(.repo) | index("<slug>")'
    ```
 
-Rotation: update fields in OpenBao, wait for ESO refresh (`make reuse-runtime-es-status`),
-roll `deployment/reuse-surface`, and re-run `make reuse-forgejo-webhook` when the
-webhook HMAC changes. Lifecycle:
-`railiance-platform/docs/credential-lane-lifecycle-runbook.md` (lane entry pending T04).
\ No newline at end of file
+Rotation: `railiance-platform/docs/reuse-surface-runtime-secrets-rotation-runbook.md`
+(OpenBao patch → ESO `force-sync` → hub rollout → `make reuse-forgejo-webhook` when
+the webhook HMAC changes → `make reuse-webhook-smoke`). Lifecycle:
+`railiance-platform/docs/credential-lane-lifecycle-runbook.md` (CCR-2026-0005).
\ No newline at end of file