diff --git a/.custodian-brief.md b/.custodian-brief.md
index a1c3cde..9190ba7 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — access-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-09-30 15:26 UTC  
+**Last synced:** 2026-09-30 16:28 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -21,17 +21,9 @@ Progress: 2/6 done  |  workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
   *(wait: Reconciliation compare needs audit-core GET /v1/reconciliation, which exists only once T02's sender is registered.)*
 
 ### Repository identity migration from flex-auth to access-engine
-Progress: 4/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
+Progress: 8/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
 
 **Open tasks:**
-- ! 5. Renew State Hub preflight and record approval  `86fecbb6`
-  *(wait: Preflight ok 2026-09-30 (operation 82b6e0ba-c25c-4ade-86c0-a6e7e22f6bf9, source 216df1f, private file not committed); needs the founder decision approving operation, commit, window, rollback limits and the confirm string. Rerun preflight if the source commit changes.)*
-- ! 6. Execute the Forgejo repository rename  `aa7ccd59`
-  *(wait: Human approval required before applying the Forge phase; preflight (T05) first.)*
-- ! 7. Record the State Hub identity rebind  `155041ed`
-  *(wait: state-hub owns the statehub-rebound mutation after the Forge phase (T06).)*
-- ! 8. Establish and register a fresh canonical clone  `c8afe078`
-  *(wait: Fresh access-engine clone and registration after the rebind (T07).)*
 - ! 9. Verify identity, history, routes, builds, and deployments  `fdb50a96`
   *(wait: Relationship-checksum verification after T08; each external owner supplies its evidence.)*
 - ! 10. Exercise rollback decision points  `3dc49eb4`