diff --git a/docs/adr/0128-producer-discriminated-aad-for-cryptocontext.md b/docs/adr/0128-producer-discriminated-aad-for-cryptocontext.md
index f32a5d10be..884fe2df4e 100644
--- a/docs/adr/0128-producer-discriminated-aad-for-cryptocontext.md
+++ b/docs/adr/0128-producer-discriminated-aad-for-cryptocontext.md
@@ -1,6 +1,6 @@
 # ADR-0128: The AAD binding on `CryptoContext` is producer-discriminated
 
-**Status**: Proposed (2026-08-28) — awaiting the maintainer's hand-merge, which is itself the acceptance act for a governed surface (Prime Directive #14). The **direction** below was already ruled on [#12599](https://github.com/objectstack-ai/objectstack/issues/12599) (maintainer, 2026-08-27, decision-inbox batch 6, verbatim and untranslated: 「其他同意」, accepting the seat recommendation "A now, with B recorded as the intended direction in its own ADR"). ⛔ **Nothing here is implemented, and this record changes no behaviour.** The prose half of that ruling shipped separately; see [Consequences](#consequences) for what is built and what is not.
+**Status**: Accepted (2026-09-07) — accepted by the maintainer's reply of 2026-09-07 (objectstack#15453, decision batch #1 of director summon #17)
 **Deciders**: maintainer ruling, 2026-08-27, PM chat decision-inbox batch 6, on the four-axis recommendation filed against [#12599](https://github.com/objectstack-ai/objectstack/issues/12599).
 **Builds on**: [ADR-0049](./0049-no-unenforced-security-properties.md) (no unenforced security properties — a documented guard weaker than the sentence advertising it is the same defect this record is about, one layer down), [ADR-0100](./0100-credential-field-channels.md) (credential field channels — the `secret` channel whose engine path is the second of the three producers below), [ADR-0112](./0112-error-code-vocabulary-and-ledger.md) (error-code vocabulary — any refusal added by the implementation legs takes a code from that ledger).
 **Supersedes**: nothing.