We built KeyTurn, an add-on for IBM Bob that checks whether a planned database password change is really complete: the app runs on the new password, the old password is refused everywhere, and restarts and queued work still succeed. IBM Bob investigates and makes the change; KeyTurn adds custom modes, a skill, a safety gate hook and a no-AI MCP checker that tests the live system and saves a handover record (VERIFIED, FAILED or UNVERIFIED). Demo: https://pvgirish.github.io/keyturn/