diff --git a/.custodian-brief.md b/.custodian-brief.md
index a274fe3..247f0a0 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,14 @@
 # Custodian Brief — access-engine
 
 **Domain:** infotech  
-**Last synced:** 2026-10-10 11:28 UTC  
+**Last synced:** 2026-10-10 11:32 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Per-identity application access readback and readable protected-system registry for user-engine
+Progress: 5/5 done  |  workplan_id: `cb9755fa-6824-5288-81c4-3aa2fbff1a9f`
+
 ### Runtime rename: flex-auth to access-engine, run side by side, consumers switch one at a time
 Progress: 0/8 done  |  workplan_id: `af0f8d77-af04-569b-8e79-6c47eb8f1087`
 
@@ -47,6 +50,11 @@ Progress: 1/2 done  |  workplan_id: `60941288-d1f8-58fe-ad38-d508b7d5eac2`
 - ! Deploy the pin (founder go required)  `aa00b29f`
   *(wait: Live railiance01 change; founder go needed for CI image digest, helm install and tunnel.)*
 
+## Inbox Hygiene
+
+**Stale unread:** 2 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 2 unread message(s) lack supersession chains.
+
 ---
 ## MCP Orientation (when available)