diff --git a/docs/work/_system/_state.json b/docs/work/_system/_state.json
index 608a17f..a58071f 100644
--- a/docs/work/_system/_state.json
+++ b/docs/work/_system/_state.json
@@ -1,5 +1,5 @@
 {
-  "updated_at": "2026-05-19T20:39:15.146Z",
+  "updated_at": "2026-05-19T20:52:13.176Z",
   "epics": {
     "binder-wrap-helper": {
       "status": "done",
@@ -308,10 +308,10 @@
           ]
         },
         "07-core-api-router-composition": {
-          "status": "todo",
+          "status": "done",
           "title": "core-api router composition — dsrRouter + consentRouter into appRouter",
           "ac_total": 1,
-          "ac_completed": 0,
+          "ac_completed": 1,
           "depends_on": [
             "04-core-consent-implementation",
             "06-core-dsr"
@@ -569,11 +569,6 @@
     }
   },
   "ready": [
-    {
-      "epic": "dsr-consent-and-cookie-banner",
-      "story": "07-core-api-router-composition",
-      "title": "core-api router composition — dsrRouter + consentRouter into appRouter"
-    },
     {
       "epic": "dsr-consent-and-cookie-banner",
       "story": "08-core-ui-scaffold",
diff --git a/docs/work/epics/dsr-consent-and-cookie-banner/07-core-api-router-composition/_story.md b/docs/work/epics/dsr-consent-and-cookie-banner/07-core-api-router-composition/_story.md
index c29925e..3ed4744 100644
--- a/docs/work/epics/dsr-consent-and-cookie-banner/07-core-api-router-composition/_story.md
+++ b/docs/work/epics/dsr-consent-and-cookie-banner/07-core-api-router-composition/_story.md
@@ -3,12 +3,12 @@ id: 07-core-api-router-composition
 epic: dsr-consent-and-cookie-banner
 title: core-api router composition — dsrRouter + consentRouter into appRouter
 type: technical-story
-status: todo
+status: done
 feature: core-api
 depends-on: [04-core-consent-implementation, 06-core-dsr]
 blocks: [11-documentation]
 created: 2026-05-19T12:00:00Z
-updated: 2026-05-19T09:55:07.020Z
+updated: 2026-05-19T20:52:13.004Z
 ---
 
 ## Goal
@@ -39,4 +39,4 @@ The two optional-core routers exist after Stories 04 and 06 but are unreachable
 
 ## Tasks
 
-- [ ] Import `dsrRouter` from `@repo/core-dsr` and `consentRouter` from `@repo/core-consent` and compose them into `core-api`'s `appRouter` via the `<gen:*>` anchor pattern; add tRPC integration tests asserting all eight procedures resolve with correct auth and response shapes; all gates pass.
+- [x] Import `dsrRouter` from `@repo/core-dsr` and `consentRouter` from `@repo/core-consent` and compose them into `core-api`'s `appRouter` via the `<gen:*>` anchor pattern; add tRPC integration tests asserting all eight procedures resolve with correct auth and response shapes; all gates pass.
diff --git a/docs/work/epics/dsr-consent-and-cookie-banner/_epic.md b/docs/work/epics/dsr-consent-and-cookie-banner/_epic.md
index ac397c5..a715c4f 100644
--- a/docs/work/epics/dsr-consent-and-cookie-banner/_epic.md
+++ b/docs/work/epics/dsr-consent-and-cookie-banner/_epic.md
@@ -16,7 +16,7 @@ features:
     auth,
   ]
 created: 2026-05-19T12:00:00Z
-updated: 2026-05-19T20:39:14.972Z
+updated: 2026-05-19T20:52:13.004Z
 ---
 
 ## Goal
@@ -35,7 +35,7 @@ Epic A delivered declarative PII inventory + retention + sub-processors. Epic B
 - [x] [04 — core-consent implementation: Payload impl + DI + migration helpers + tRPC router](04-core-consent-implementation/_story.md)
 - [x] [05 — core-consent React subpath: ConsentProvider + useConsent()](05-core-consent-react/_story.md)
 - [x] [06 — core-dsr: scaffold + interfaces + Payload impls + handlers + dsrRouter](06-core-dsr/_story.md)
-- [ ] [07 — core-api router composition: dsrRouter + consentRouter into appRouter](07-core-api-router-composition/_story.md)
+- [x] [07 — core-api router composition: dsrRouter + consentRouter into appRouter](07-core-api-router-composition/_story.md)
 - [ ] [08 — core-ui scaffold](08-core-ui-scaffold/_story.md)
 - [ ] [09 — CookieConsentBanner component in core-ui](09-cookie-consent-banner/_story.md)
 - [ ] [10 — auth signUp anonymous consent migration](10-auth-signup-migration/_story.md)