diff --git a/clients/cascades-tucson/docs/network/csc-ent-device-island-plan.md b/clients/cascades-tucson/docs/network/csc-ent-device-island-plan.md
index ef3d9351..03dec7fb 100644
--- a/clients/cascades-tucson/docs/network/csc-ent-device-island-plan.md
+++ b/clients/cascades-tucson/docs/network/csc-ent-device-island-plan.md
@@ -68,12 +68,19 @@ reprogrammed — only band-moved by Helpany).
 |---|---|---|---|---|
 | **CSC ENT** (repurposed) | **5 GHz-only, WPA2-PSK** | **PPSK** | Poly voice handsets | **VLAN 30** (existing voice, keep) |
 | | | | Helpany Paul sensors | **VLAN 40** (new, sensors) |
+| | | | Proxess door locks | **VLAN 60** (new, access control) |
 | **CSCNet** | 2.4 + 5 GHz, WPA2 (today) | PPSK (per-room) | residents + staff IoT/TVs | per-room VLANs (unchanged) |
 | **Guest** | 2.4 + 5 GHz, WPA2 | — | guests | VLAN 50 (unchanged) |
 
 **PPSK key map on CSC ENT:**
 - Existing key `Ftfd85710#` -> **VLAN 40** (Helpany). Pauls keep SSID + password unchanged.
 - New voice key -> **VLAN 30** (phones). Howard/Richard re-point the Polys to this key.
+- New door-lock key -> **VLAN 60** (Proxess). UnWired programs the locks onto this key during the install.
+
+> **Door locks confirmed WiFi + 5 GHz-capable (Howard, 2026-07-15).** So the Proxess locks live on
+> CSC ENT via their own PPSK -> VLAN 60, exactly like Helpany. Because they do 5 GHz, they work on
+> CSC ENT **both before and after** the 5 GHz-only flip — the lock rollout is NOT gated by the
+> resident/staff evacuation. Enabling PPSK on CSC ENT is the only near-term prerequisite.
 
 **Only structural change to CSC ENT itself:** flip `wlan_bands` from `[2g,5g]` to `[5g]` and
 enable PPSK. The band flip is the step requiring vendor coordination + the coverage check.