diff --git a/project/ticket-003/README.md b/project/ticket-003/README.md
index f1f24b1..96d5d8e 100644
--- a/project/ticket-003/README.md
+++ b/project/ticket-003/README.md
@@ -2,7 +2,7 @@
 
 - **ID**: ticket-003
 - **Owner**: unresolved:human
-- **Status**: IN_PROGRESS
+- **Status**: DONE
 - **Workflow state**: PUBLICATION
 - **Created**: 2026-09-01
 
@@ -21,10 +21,10 @@ no runtime or Docker implementation change.
 - [x] AC-02: `uv.lock` is declared as an integration-owned dependency manifest
   and shared integration path.
 - [x] AC-03: No existing ownership or runtime behavior changes.
-- [ ] AC-04: Required CI installs the declared `nlp2env` test extra and passes
+- [x] AC-04: Required CI installs the declared `nlp2env` test extra and passes
   the suite that already exercises that optional integration; its existing
   workflow path is explicitly assigned to governance.
-- [ ] AC-05: Governance, Docker configuration and protected exact-head
+- [x] AC-05: Governance, Docker configuration and protected exact-head
   publication checks pass.
 
 The managed manifest lock is updated only to bind the resulting local
@@ -49,6 +49,13 @@ on pre-existing `main` failed with `ModuleNotFoundError: nlp2env`. The workflow
 installed `.[dev]` even though its suite imports the declared `nlp2env` extra;
 the exact correction is validated by the replacement required check.
 
+## Publication evidence
+
+Validator run `33562763375` approved exact HEAD
+`a604a49ca35d0b249dd641629ba61fbcb8011209` after the required `test` check
+passed. PR #11 merged as `6e4c92b5da968ee223cc6917aadd651cf5876d77`
+on 2026-09-01, and the remote ticket branch was deleted automatically.
+
 ## Participants
 
 - Human participant: unresolved; no user-* file was created by this script.
diff --git a/project/ticket-003/ai-codex-logs.txt b/project/ticket-003/ai-codex-logs.txt
index cdf90fb..32348db 100644
--- a/project/ticket-003/ai-codex-logs.txt
+++ b/project/ticket-003/ai-codex-logs.txt
@@ -5,3 +5,5 @@
 2026-09-01T21:32:00Z PUBLICATION rejected exact_head=e1c6b8e required_check=test conclusion=failure.
 2026-09-01T21:34:00Z DIAGNOSIS base_main=cc9171f failure="ModuleNotFoundError: nlp2env" workflow_installed=".[dev]" declared_extra="nlp2env".
 2026-09-01T21:38:00Z VALIDATION governance=pass compose=pass docker_check=pass nlp2env_import=pass diff_check=pass.
+2026-09-01T21:46:34Z PUBLICATION validator_run=33562763375 exact_head=a604a49ca35d0b249dd641629ba61fbcb8011209 merge=6e4c92b5da968ee223cc6917aadd651cf5876d77 required_check=test branch_deleted=true.
+2026-09-01T21:48:00Z DONE ticket=ticket-003.
diff --git a/project/ticket-003/ai-codex.md b/project/ticket-003/ai-codex.md
index ed13b09..3add59b 100644
--- a/project/ticket-003/ai-codex.md
+++ b/project/ticket-003/ai-codex.md
@@ -34,7 +34,15 @@ only declares that integration-owned contract before any lock or image change.
   merge. Updated CI to install the existing `nlp2env` extra exercised by the
   suite, without adding or changing a runtime dependency, and assigned the
   previously unowned workflow path to governance.
+- Required CI passed on replacement exact HEAD `a604a49ca35d`; Validator run
+  `33562763375` approved it and merged PR #11 as `6e4c92b5da96`. The remote
+  branch and verified disposable worktree were removed.
 
 ## Blockers
 
 - None.
+
+## Publication
+
+Complete. The ticket is closed after protected exact-head merge evidence was
+observed from GitHub.
diff --git a/project/ticket-003/changelog.md b/project/ticket-003/changelog.md
index 725ee85..3394417 100644
--- a/project/ticket-003/changelog.md
+++ b/project/ticket-003/changelog.md
@@ -7,3 +7,4 @@
 - Planned the narrow integration ownership declaration for `uv.lock`.
 - Declared and validated `uv.lock` as an integration-owned dependency contract.
 - Restored required CI coverage for the repository's declared `nlp2env` extra.
+- Recorded the trusted exact-head merge and closed the ticket.