diff --git a/docs/authentication/.review/implementation-plan.md b/docs/authentication/.review/implementation-plan.md
index 9fab8d8..0a93335 100644
--- a/docs/authentication/.review/implementation-plan.md
+++ b/docs/authentication/.review/implementation-plan.md
@@ -3,20 +3,20 @@ artifact: swe-design-review-attestation
 schema_version: 6
 scope_key: c2ebaf06c49668e199e08bccef68303c5cd0925e79b8f635860bb8fa8494d61b
 scope: {"kind": "path", "primary_target": "docs/authentication/implementation-plan.md", "repository": ".", "selector": "docs/authentication/implementation-plan.md"}
-review_content_identity_sha256: f46fc5843e78a8a5fd743a620ca1f795760d4e4d3d28bc7db44e7963eb32aaca
-target_content_identity_sha256: 4edf646bb0369f9066ae6ae575c940373ef1595f1fb93965f7e450914ce66244
+review_content_identity_sha256: 32272b7fdf21b1aa8d19f720f7de16edf4262042130322944967af9350ab8a36
+target_content_identity_sha256: 447615f8354c3cfd6ac41dfda383b76856f4af7cadf624a50fecb91e66d7df6f
 baseline_content_identity_sha256: 8e02df1e7ff92b8aef06db429f86cd9b60ef8fdb1651422b9e6473cad85338a9
-target_documents: [{"executable": false, "path": "docs/authentication/README.md", "repository": ".", "sha256": "2bff627a30d975cbdde020b014638d6b061c2aba891815a2975998a1894a6ef9"}, {"executable": false, "path": "docs/authentication/implementation-plan.md", "repository": ".", "sha256": "38456f43776f8b47b1c5beb7cdbf5be5a34832267286a0135a489083980a4379"}]
+target_documents: [{"executable": false, "path": "docs/authentication/implementation-plan.md", "repository": ".", "sha256": "3c0fada6a105777ecd5546b3f3898b0b2dea71f1032176e6ccd7c3fd51386a6a"}]
 baseline_documents: [{"executable": false, "path": "docs/authentication/high-level-design.md", "repository": ".", "sha256": "b6511414b3a9b485542df83c8f7abfc499dc8d06e522819b48e162a562d21c57"}, {"executable": false, "path": "docs/authentication/milestone-3-lld.md", "repository": ".", "sha256": "566601529e5dabfa25cb575a9fc890ab625f358115ab0b836a53174a025bd25f"}, {"executable": false, "path": "docs/authentication/portable-enrollment-lld.md", "repository": ".", "sha256": "7cbad8803d0ade4090289d22a681a01026782ade9785c731ac7a2d8a33b9c0e1"}, {"executable": false, "path": "docs/authentication/requirements.md", "repository": ".", "sha256": "d56e92a7cb01f131ba499650c4a5d7b2c8d17adf2cdc7d612eee7c5f53d07929"}]
 design_dependency_documents: [{"executable": false, "path": "docs/authentication/high-level-design.md", "repository": ".", "sha256": "b6511414b3a9b485542df83c8f7abfc499dc8d06e522819b48e162a562d21c57"}, {"executable": false, "path": "docs/authentication/milestone-3-lld.md", "repository": ".", "sha256": "566601529e5dabfa25cb575a9fc890ab625f358115ab0b836a53174a025bd25f"}, {"executable": false, "path": "docs/authentication/portable-enrollment-lld.md", "repository": ".", "sha256": "7cbad8803d0ade4090289d22a681a01026782ade9785c731ac7a2d8a33b9c0e1"}, {"executable": false, "path": "docs/authentication/requirements.md", "repository": ".", "sha256": "d56e92a7cb01f131ba499650c4a5d7b2c8d17adf2cdc7d612eee7c5f53d07929"}]
-plan_binding: {"base_revision": "7ca9b3d2a556852672eedaaa264ed94a44ba38af", "documents": [{"executable": false, "path": "docs/authentication/implementation-plan.md", "plan_key": "arbiter-authentication", "sha256": "38456f43776f8b47b1c5beb7cdbf5be5a34832267286a0135a489083980a4379", "slice_convention": "hierarchical-v1"}], "predecessors": [{"executable": false, "path": "docs/authentication/implementation-plan.md", "sha256": "b2899d82e5f0914b3a5088bdbbe0fa4dce7034ea6e8cc963d5b61df11acc3fcc"}]}
-security_review: {"actual": "dbb", "binding_identity_sha256": "5357c8e3040ed8f3d37fa71fb3228a9a424b88332404fa6e576c478e40c33dad", "requested": "dbb", "reviewer": "/root/auth210_inventory_dbb_recovery", "schema_version": 1}
+plan_binding: {"base_revision": "e144661ff7049451365f0dccc80ba840f39d3433", "documents": [{"executable": false, "path": "docs/authentication/implementation-plan.md", "plan_key": "arbiter-authentication", "sha256": "3c0fada6a105777ecd5546b3f3898b0b2dea71f1032176e6ccd7c3fd51386a6a", "slice_convention": "hierarchical-v1"}], "predecessors": [{"executable": false, "path": "docs/authentication/implementation-plan.md", "sha256": "38456f43776f8b47b1c5beb7cdbf5be5a34832267286a0135a489083980a4379"}]}
+security_review: {"actual": "dbb", "binding_identity_sha256": "079c608ef4ca136286e8c683716683f015431ec1aa5d344af03d4da22c1824e4", "requested": "dbb", "reviewer": "/root/auth2104_round8_inventory_dbb", "schema_version": 1}
 document_repository: "."
 document_path: "docs/authentication/implementation-plan.md"
-document_revision_provenance: "7ca9b3d2a556852672eedaaa264ed94a44ba38af"
-document_sha256: 38456f43776f8b47b1c5beb7cdbf5be5a34832267286a0135a489083980a4379
+document_revision_provenance: "e144661ff7049451365f0dccc80ba840f39d3433"
+document_sha256: 3c0fada6a105777ecd5546b3f3898b0b2dea71f1032176e6ccd7c3fd51386a6a
 verdict: clean
-attested_at: 2026-10-28T11:48:40Z
+attested_at: 2026-11-01T08:04:06Z
 ---
 <!-- swe-design-review-attestation:v6 -->
 
diff --git a/docs/authentication/implementation-plan.md b/docs/authentication/implementation-plan.md
index 329bebf..fd0f895 100644
--- a/docs/authentication/implementation-plan.md
+++ b/docs/authentication/implementation-plan.md
@@ -711,12 +711,15 @@ portable LLD remains the authority for behavior, acceptance and estimates.
         "paths": [
           "client/go-cli/internal/cli/enrollment.go",
           "client/go-cli/internal/cli/enrollment_test.go",
+          "client/go-cli/internal/identity/provisional_session.go",
+          "client/go-cli/internal/identity/registration_peer_test.go",
           "client/go-cli/internal/identity/enrollment.go",
           "client/go-cli/internal/identity/enrollment_test.go",
           "server/src/arbiter_server/main.py",
           "server/src/arbiter_server/enrollment.py",
           "server/tests/unit/test_enrollment_requests.py",
-          "server/tests/unit/test_main.py",
+          "server/tests/unit/test_enrollment_admin.py",
+        "server/tests/unit/test_main.py",
           "server/tests/integration/enrollment_terminal_driver.py",
           "server/tests/integration/test_installed_enrollment.py",
           ".github/workflows/ci.yml",