diff --git a/.custodian-brief.md b/.custodian-brief.md
index c4921e8..8aa3ca3 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — access-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-09-30 18:49 UTC  
+**Last synced:** 2026-10-03 06:58 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -20,6 +20,13 @@ Progress: 2/6 done  |  workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`
 - ! 6. Reconciliation, profile check, and storage  `bf92a951`
   *(wait: Reconciliation compare needs audit-core GET /v1/reconciliation, which exists only once T02's sender is registered.)*
 
+### 2026-10-03 secret-read evaluator for ops-warden fetch checks
+Progress: 1/2 done  |  workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
+
+**Open tasks:**
+- ! Deploy the pin (founder go required)  `aa00b29f`
+  *(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)*
+
 ### Repository identity migration from flex-auth to access-engine
 Progress: 10/11 done  |  workplan_id: `99a661a8-b36c-5c1c-b78b-1e8930bcd0a9`
 
@@ -36,7 +43,8 @@ Progress: 2/3 done  |  workplan_id: `954635b2-8377-5227-ab4f-10607b2a02c6`
 
 ## Inbox Hygiene
 
-**Missing thread_id:** 3 unread message(s) lack supersession chains.
+**Stale unread:** 3 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 6 unread message(s) lack supersession chains.
 
 ---
 ## MCP Orientation (when available)