diff --git a/registry/repos.json b/registry/repos.json
index fd964b142..089cb95d3 100644
--- a/registry/repos.json
+++ b/registry/repos.json
@@ -315,7 +315,7 @@
             "name": "Blog",
             "url": "https://github.com/ptr727/Blog",
             "status": "cataloged",
-            "types": ["hugo", "source-only", "python"],
+            "types": ["hugo", "source-only", "python", "host-secrets"],
             "groundTruthBranch": "main",
             "workflowModel": "release",
             "lineEndings": "lf",
diff --git a/reports/conformance-matrix.md b/reports/conformance-matrix.md
index 7af653fe9..aa12cf535 100644
--- a/reports/conformance-matrix.md
+++ b/reports/conformance-matrix.md
@@ -20,7 +20,7 @@ The primary shapes are stood up as whole repos. The **composable targets** (`nug
 | `upstream-wrapper` | - | not-tested | - | Tag from a committed state file, not SemVer2. |
 | `codegen` | - | not-tested | - | Deterministic matrix over both branches. |
 | `docs` | ProjectTemplate | not-tested | - | Governance hub, and CI is lint-only. |
-| `host-secrets` overlay | - | not-tested | - | Layered onto a base shape, and carries the hub's `lib/sh` secret and env readers at `lib/fleet/sh` byte-for-byte. HomeAutomation-Config is the first adopter, by its own adoption issue. |
+| `host-secrets` overlay | - | not-tested | - | Layered onto a base shape, and carries the hub's `lib/sh` secret and env readers at `lib/fleet/sh` byte-for-byte. Blog is the first repository to declare it, and ptr727/Blog#553 tracks its carry of the readers. HomeAutomation-Config has neither declared nor carried it yet, and is to adopt it by its own adoption issue. |
 | `operational` config | - | not-tested | - | `workflowModel: operational`, direct signed commits to `develop`, promotion-PR gate. HomeAutomation-Config was the reference until its 2026-09-24 reclassification to `release`, and no remaining operational repository (ESPHome-Config, HomeAssistant-Config, Vantage-Config) has taken its place yet. |
 
 ## Composable Targets