diff --git a/.custodian-brief.md b/.custodian-brief.md
index 37df6cd..44847e7 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-09-28 21:44 UTC  
+**Last synced:** 2026-09-28 21:49 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -20,12 +20,6 @@ Progress: 2/6 done  |  workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
 - ! 6. Reconciliation, profile check, and storage  `bf92a951`
   *(wait: Reconciliation compare needs audit-core GET /v1/reconciliation, which exists only once T02's sender is registered.)*
 
-### Admit scoped human review for the three T03 actions
-Progress: 2/3 done  |  workplan_id: `954635b2-8377-5227-ab4f-10607b2a02c6`
-
-**Open tasks:**
-- ! Verify actual human review through the native service  `9417d64a`
-
 ### Repository identity migration from flex-auth to access-engine
 Progress: 3/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
 
@@ -33,13 +27,26 @@ Progress: 3/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
 - ! 4. Inventory consumers and create owned handoffs  `9bb138e1`
   *(wait: Await each downstream owner's own repository-coordinate handoff (fabric, ops-warden, reuse-surface, policy-nexus, net-kingdom and others) before T05/T06.)*
 - ! 5. Renew State Hub preflight and record approval  `86fecbb6`
+  *(wait: Preflight runs once the downstream handoff inventory (T04) is complete.)*
 - ! 6. Execute the Forgejo repository rename  `aa7ccd59`
+  *(wait: Human approval required before applying the Forge phase; preflight (T05) first.)*
 - ! 7. Record the State Hub identity rebind  `155041ed`
+  *(wait: state-hub owns the statehub-rebound mutation after the Forge phase (T06).)*
 - ! 8. Establish and register a fresh canonical clone  `c8afe078`
+  *(wait: Fresh access-engine clone and registration after the rebind (T07).)*
 - ! 9. Verify identity, history, routes, builds, and deployments  `fdb50a96`
+  *(wait: Relationship-checksum verification after T08; each external owner supplies its evidence.)*
 - ! 10. Exercise rollback decision points  `3dc49eb4`
+  *(wait: Continue/pause/rollback decision at each phase; needs T09 verification.)*
 - … and 1 more open tasks
 
+### Admit scoped human review for the three T03 actions
+Progress: 2/3 done  |  workplan_id: `954635b2-8377-5227-ab4f-10607b2a02c6`
+
+**Open tasks:**
+- ! Verify actual human review through the native service  `9417d64a`
+  *(wait: Needs the operator's exact signed-in account and actual human acknowledgements; synthetic policy checks are not acceptance.)*
+
 ---
 ## MCP Orientation (when available)