diff --git a/documentation/audits/DRILL-retained-key-2026-08-12.md b/documentation/audits/DRILL-retained-key-2026-08-12.md
index d573860..1c4b62c 100644
--- a/documentation/audits/DRILL-retained-key-2026-08-12.md
+++ b/documentation/audits/DRILL-retained-key-2026-08-12.md
@@ -450,8 +450,8 @@ whose credentials reach nothing else — and the only mutating verb used was `ba
 | Phase A — removal leftover | 16:50 → 17:12 | **~22 min** (4 installs, 4 uninstalls, 3 preflights) |
 | Phase B — stale golden | 17:13 → 17:34 | **~21 min** (2 full provisions) |
 | Phase C — retained key | 17:14 → 17:23 | **~25 min** (overlapped Phase B; different machine) |
-| Record, register, publication, teardown | 17:35 → 17:55 | **~20 min** |
-| **Total** | **16:42 → 17:55** | **≈ 1 h 13 min** |
+| Record, register, publication, teardown | 17:34 → 17:45 | **~11 min** |
+| **Total** | **16:42 → 17:45** | **≈ 1 h 03 min** |
 
 Phase C ran concurrently with Phase B deliberately — different machines, no shared state. The
 4–5 hour envelope was not needed; nothing was hurried and nothing was dropped for time.