diff --git a/.custodian-brief.md b/.custodian-brief.md
index 92bb2b0..11766fd 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,19 +2,17 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-10-09 17:12 UTC  
+**Last synced:** 2026-10-09 18:03 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Per-identity application access readback and readable protected-system registry for user-engine
-Progress: 0/4 done  |  workplan_id: `cb9755fa-6824-5288-81c4-3aa2fbff1a9f`
+Progress: 3/5 done  |  workplan_id: `cb9755fa-6824-5288-81c4-3aa2fbff1a9f`
 
 **Open tasks:**
 - ! Deploy to the user-engine pin  `82a8a7e6`
-- ► Define the readback contract  `0585a684`
-- · Caller authorization for cross-system readback  `eb0b6a91`
-- · Readable protected-system registry  `5dbb3280`
+- · informed-decision declares `application.access`  `701cbd99`
 
 ### The decision record has a declared emission guarantee and nothing that delivers it
 Progress: 4/8 done  |  workplan_id: `84f5d9fe-b4c9-584a-b964-efe3e48af095`