diff --git a/CHANGELOG.md b/CHANGELOG.md
index 789a386..cfb94da 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,13 @@ and callers pin `go-release.yml@<commit>  # vX.Y.Z`.
 
 ## [Unreleased]
 
+### Changed
+
+- `dependabot/policy.json` reconciles and merge-gates `sangehq`, the eleventh owned org, which was
+  missing from `accounts.orgs`. It excludes the three repositories on the WIP ignore list
+  (`brandgulp/brandgulp.com`, `simbi-prjs-int/creamer.simtabi.com`, `tusente/web-app`) so turning
+  the reconciler on opens no pull request against them.
+
 ## [0.1.0] - 2026-11-14
 
 First tagged release of the shared workflows. It replaces `v1.0.0` and `v1.0.1`, withdrawn on
diff --git a/dependabot/README.md b/dependabot/README.md
index d83dd78..7ba6c01 100644
--- a/dependabot/README.md
+++ b/dependabot/README.md
@@ -23,7 +23,7 @@ Every run prints a table and appends it to the job summary: for the reconciler `
 | Key | Value | Meaning |
 |---|---|---|
 | `version` | `1` | Named in the header of every generated file. Bump it when the rendered shape changes. |
-| `accounts.orgs` | 10 owned orgs | Reconciled and merge-gated by the workflows, with a `refresh-bot` token per org. |
+| `accounts.orgs` | 11 owned orgs | Reconciled and merge-gated by the workflows, with a `refresh-bot` token per org. |
 | `accounts.users` | `imanimanyara` | Not covered by the GitHub App; run locally (below). |
 | `exclude` | `[{"repo": "owner/name", "reason": "..."}]` | Repositories neither script touches. A reason is required. |
 | `schedule` | weekly, Monday 06:00, America/New_York | The documented convention. |
diff --git a/dependabot/policy.json b/dependabot/policy.json
index 77562cd..70f52de 100644
--- a/dependabot/policy.json
+++ b/dependabot/policy.json
@@ -11,7 +11,8 @@
    "tayariai",
    "tusente",
    "simbi-prjs-clt",
-   "simbi-prjs-int"
+   "simbi-prjs-int",
+   "sangehq"
   ],
   "users": [
    "imanimanyara"
@@ -21,6 +22,18 @@
   {
    "repo": "laranail/wire-elements-pro",
    "reason": "A mirror of the commercial Wire Elements Pro package: its dependencies follow upstream releases, not Dependabot."
+  },
+  {
+   "repo": "brandgulp/brandgulp.com",
+   "reason": "On the WIP ignore list (opensource/WIP-IGNORE.md, 2026-11-03): red default branch until work officially starts. Remove this entry when it leaves that list."
+  },
+  {
+   "repo": "simbi-prjs-int/creamer.simtabi.com",
+   "reason": "On the WIP ignore list (opensource/WIP-IGNORE.md, 2026-11-03): red default branch until work officially starts. Remove this entry when it leaves that list."
+  },
+  {
+   "repo": "tusente/web-app",
+   "reason": "On the WIP ignore list (opensource/WIP-IGNORE.md, 2026-11-03): red default branch until work officially starts. Remove this entry when it leaves that list."
   }
  ],
  "schedule": {