diff --git a/.custodian-brief.md b/.custodian-brief.md
index acb3fe0..ad1a8b1 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,19 +2,11 @@
 # Custodian Brief — flex-auth
 
 **Domain:** infotech  
-**Last synced:** 2026-09-07 11:44 UTC  
+**Last synced:** 2026-09-13 22:56 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-### A policy cannot tell a registry fact from a caller assertion
-Progress: 0/3 done  |  workplan_id: `f9a657ce-67b4-5d25-9933-e0fcb2c20b1c`
-
-**Open tasks:**
-- ! 3. Make the review obligation enforceable rather than written  `8ee5baf9`
-- · 1. Decide the shape  `05c6a85d`
-- · 2. Audit every package for ceilings read from undeclared keys  `fc61c8a7`
-
 ### Operator caller access path and caller identity in the decision record
 Progress: 4/5 done  |  workplan_id: `ad011f92-786c-51ad-b3f6-c06ad77e7af7`
 
@@ -28,6 +20,19 @@ Progress: 2/4 done  |  workplan_id: `90577acd-6910-548d-a13e-1dbfdfb8ed27`
 - ! 3. Implement signing and verification  `041612ea`
 - · 2. Choose the signature shape and key custody  `5482f3cd`
 
+### A policy cannot tell a registry fact from a caller assertion
+Progress: 0/3 done  |  workplan_id: `f9a657ce-67b4-5d25-9933-e0fcb2c20b1c`
+
+**Open tasks:**
+- ! 3. Make the review obligation enforceable rather than written  `8ee5baf9`
+- · 1. Decide the shape  `05c6a85d`
+- · 2. Audit every package for ceilings read from undeclared keys  `fc61c8a7`
+
+## Inbox Hygiene
+
+**Stale unread:** 7 message(s) older than 3 day(s) — triage at session start.
+**Missing thread_id:** 3 unread message(s) lack supersession chains.
+
 ---
 ## MCP Orientation (when available)