diff --git a/.custodian-brief.md b/.custodian-brief.md
index 5771be2..342bbac 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,16 +2,24 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-08-23 11:17 UTC  
+**Last synced:** 2026-08-23 11:21 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
+### Action-bound authorization and durable approval contract
+Progress: 3/5 done  |  workplan_id: `d75b7256-8b3d-5797-911c-96c3199b8baa`
+
+**Open tasks:**
+- ! Add durable storage and authenticated approval evidence  `82d39961`
+- ! Consumer handoff and live destructive-action proof  `8c3fc0a2`
+
 ### Authorize railiance-platform credential-grant requests
 Progress: 0/4 done  |  workplan_id: `89ecdb1f-ceb0-4a50-b72d-c3dfd5fa7c73`
 
 **Open tasks:**
-- ► T01 - Decide where the translation lives  `a1c9ba0c`
+- ! T01 - Decide where the translation lives  `a1c9ba0c`
+  *(wait: Consumer-owned wire contract requires railiance-platform agreement and escalated decision resolution.)*
 - · T02 - Credential-grant policy package and fixtures  `7e9c4e59`
 - · T03 - Implement the decided integration and prove it end to end  `3335b2b7`
 - · T04 - Closure and handoff  `40015a87`