diff --git a/.custodian-brief.md b/.custodian-brief.md
index ee82692..0baac29 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,11 +2,25 @@
 # Custodian Brief — activity-core
 
 **Domain:** infotech  
-**Last synced:** 2026-10-13 18:57 UTC  
+**Last synced:** 2026-10-13 19:10 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Adopt the daily security-flow schedule (CUST-WP-0079-T03)
+Progress: 1/3 done  |  workplan_id: `ee97869b-dca2-54c9-aa18-0b479c244fb3`
+
+**Open tasks:**
+- ! Activation  `d0d5fddd`
+- ! First unassisted fire  `d692a3eb`
+
+### Repository grant v2: publish scope for governed pushes (REINAH-WP-0003-T04)
+Progress: 1/3 done  |  workplan_id: `b6b5d39e-cd56-5a91-a67e-dcdf7b8d147c`
+
+**Open tasks:**
+- ! rein-aharness contract confirmation  `78c39857`
+- ! assembly-checkpoint definitions adopt v2  `0c3c628b`
+
 ### Adopt the Glas profile-driven execution contract
 Progress: 4/5 done  |  workplan_id: `256dad13-28b4-5361-ab8a-7d1373a5d14b`
 
@@ -50,8 +64,7 @@ Progress: 5/8 done  |  workplan_id: `e1bfb5a4-e647-592d-883f-fe8728ad2f5f`
 
 ## Inbox Hygiene
 
-**Stale unread:** 1 message(s) older than 3 day(s) — triage at session start.
-**Missing thread_id:** 2 unread message(s) lack supersession chains.
+**Missing thread_id:** 1 unread message(s) lack supersession chains.
 
 ---
 ## MCP Orientation (when available)
diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md
index 4219d9c..9a82870 100644
--- a/WORK-RECORDS.md
+++ b/WORK-RECORDS.md
@@ -48,6 +48,8 @@
 | workplan | ACTIVITY-WP-0043 | blocked | — | workplans/ACTIVITY-WP-0043-state-hub-owner-return-pickup.md |
 | workplan | ACTIVITY-WP-0044 | blocked | — | workplans/ACTIVITY-WP-0044-repo-manager-bounded-freshness-definition.md |
 | workplan | ACTIVITY-WP-0045 | finished | — | workplans/ACTIVITY-WP-0045-stale-historical-projection-disposition.md |
+| workplan | ACTIVITY-WP-0046 | active | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md |
+| workplan | ACTIVITY-WP-0047 | active | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md |
 | workplan | ACTIVITY-WP-ADHOC-2026-06-01 | finished | — | workplans/ADHOC-2026-06-01.md |
 | workplan | ACTIVITY-WP-ADHOC-2026-08-20 | finished | — | workplans/ADHOC-2026-08-20.md |
 | workplan | ACTIVITY-WP-ADHOC-2026-08-23 | finished | — | workplans/ADHOC-2026-08-23.md |
@@ -263,6 +265,12 @@
 | task | ACTIVITY-WP-0044-T03 | wait | — | workplans/ACTIVITY-WP-0044-repo-manager-bounded-freshness-definition.md |
 | task | ACTIVITY-WP-0045-T01 | done | — | workplans/ACTIVITY-WP-0045-stale-historical-projection-disposition.md |
 | task | ACTIVITY-WP-0045-T02 | done | — | workplans/ACTIVITY-WP-0045-stale-historical-projection-disposition.md |
+| task | ACTIVITY-WP-0046-T01 | done | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md |
+| task | ACTIVITY-WP-0046-T02 | wait | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md |
+| task | ACTIVITY-WP-0046-T03 | wait | — | workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md |
+| task | ACTIVITY-WP-0047-T01 | done | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md |
+| task | ACTIVITY-WP-0047-T02 | wait | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md |
+| task | ACTIVITY-WP-0047-T03 | wait | — | workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md |
 | task | ACTIVITY-WP-ADHOC-2026-06-01-T01 | done | — | workplans/ADHOC-2026-06-01.md |
 | task | ACTIVITY-WP-ADHOC-2026-06-01-T02 | done | — | workplans/ADHOC-2026-06-01.md |
 | task | ACTIVITY-WP-ADHOC-2026-06-01-T03 | done | — | workplans/ADHOC-2026-06-01.md |
diff --git a/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md b/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md
index d6f25d5..9c19fed 100644
--- a/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md
+++ b/workplans/ACTIVITY-WP-0046-repository-grant-v2-publish-scope.md
@@ -11,6 +11,7 @@ created: "2026-10-13"
 updated: "2026-10-13"
 flavor: implementation
 related: [REINAH-WP-0003, ACTIVITY-WP-0038, ASSEMBLY-WP-0010]
+state_hub_workstream_id: "b6b5d39e-cd56-5a91-a67e-dcdf7b8d147c"
 ---
 
 Origin: rein-aharness (message 3eb4fa11, 2026-10-13) needs the repository grant
@@ -30,6 +31,7 @@ enforces it and refuses any push without it.
 id: ACTIVITY-WP-0046-T01
 status: done
 priority: high
+state_hub_task_id: "ec8f32f2-db9d-5e41-bc14-7cd97e46816e"
 ```
 
 Extend `repository_grant.py` with `PublishScope` and version "2"; include the
@@ -44,6 +46,7 @@ prefixes outside `allowed_paths`; accept publish evidence keys in
 id: ACTIVITY-WP-0046-T02
 status: wait
 priority: high
+state_hub_task_id: "78c39857-70cf-576a-b8f3-143bfb2c1e82"
 ```
 
 rein-aharness confirms it computes the same v2 grant id and enforces the scope
@@ -55,6 +58,7 @@ rein-aharness confirms it computes the same v2 grant id and enforces the scope
 id: ACTIVITY-WP-0046-T03
 status: wait
 priority: medium
+state_hub_task_id: "0c3c628b-3456-5817-bcdd-0fa785a184b3"
 ```
 
 assembly-economics declares a v2 grant on its checkpoint definitions and the
diff --git a/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md b/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md
index e7ed407..216df8c 100644
--- a/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md
+++ b/workplans/ACTIVITY-WP-0047-daily-security-flow-adoption.md
@@ -11,6 +11,7 @@ created: "2026-10-13"
 updated: "2026-10-13"
 flavor: implementation
 related: [CUST-WP-0079]
+state_hub_workstream_id: "ee97869b-dca2-54c9-aa18-0b479c244fb3"
 ---
 
 Origin: the-custodian handed over the daily security-flow lane (message
@@ -29,6 +30,7 @@ general execution). The run carries no repository grant.
 id: ACTIVITY-WP-0047-T01
 status: done
 priority: high
+state_hub_task_id: "cbe8cfe2-43ef-5a31-b163-c473572754b7"
 ```
 
 `activity-definitions/daily-security-flow.md`: daily 07:30 Europe/Berlin,
@@ -42,6 +44,7 @@ misfire skip, one unconditional rule emitting an ops_run on
 id: ACTIVITY-WP-0047-T02
 status: wait
 priority: high
+state_hub_task_id: "d0d5fddd-2d73-5156-aac3-49837aec2988"
 ```
 
 Wait: the claiming rein (rein-aharness, workstation profile) confirms it can
@@ -55,6 +58,7 @@ run one manual trigger.
 id: ACTIVITY-WP-0047-T03
 status: wait
 priority: medium
+state_hub_task_id: "d692a3eb-7878-5405-931c-e11db494f803"
 ```
 
 Observe one scheduled fire end to end (ops_run completed, report written, no