diff --git a/.custodian-brief.md b/.custodian-brief.md
index b395b5a..92bb2b0 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,20 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-10-09 17:04 UTC  
+**Last synced:** 2026-10-09 17:12 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Per-identity application access readback and readable protected-system registry for user-engine
+Progress: 0/4 done  |  workplan_id: `cb9755fa-6824-5288-81c4-3aa2fbff1a9f`
+
+**Open tasks:**
+- ! Deploy to the user-engine pin  `82a8a7e6`
+- ► Define the readback contract  `0585a684`
+- · Caller authorization for cross-system readback  `eb0b6a91`
+- · Readable protected-system registry  `5dbb3280`
+
 ### The decision record has a declared emission guarantee and nothing that delivers it
 Progress: 4/8 done  |  workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
 
@@ -36,10 +45,8 @@ Progress: 1/2 done  |  workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
 
 ## Inbox Hygiene
 
-**Stale unread:** 12 message(s) older than 3 day(s) — triage at session start.
-**Missing thread_id:** 8 unread message(s) lack supersession chains.
-- ! informed-decision: INFD-WP-0005: attribute admission for agent-posed decision memos (no per-memo policy deploy)  `306bcdd2`
-- ! net-kingdom: FLEX-WP-0020-T04: net-kingdom owner work-record and deployment verification  `92e9c4a5`
+**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 2 unread message(s) lack supersession chains.
 
 ---
 ## MCP Orientation (when available)