diff --git a/.custodian-brief.md b/.custodian-brief.md
index 8450cdb..5771be2 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -1,18 +1,25 @@
 <!-- custodian-brief: generated by fix-consistency — do not edit manually -->
 # Custodian Brief — flex-auth
 
-**Domain:** communication  
-**Last synced:** 2026-08-19 12:36 UTC  
+**Domain:** infotech  
+**Last synced:** 2026-08-23 11:17 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Authorize railiance-platform credential-grant requests
+Progress: 0/4 done  |  workplan_id: `89ecdb1f-ceb0-4a50-b72d-c3dfd5fa7c73`
+
+**Open tasks:**
+- ► T01 - Decide where the translation lives  `a1c9ba0c`
+- · T02 - Credential-grant policy package and fixtures  `7e9c4e59`
+- · T03 - Implement the decided integration and prove it end to end  `3335b2b7`
+- · T04 - Closure and handoff  `40015a87`
 
 ---
 ## MCP Orientation (when available)
 
 If the state-hub MCP server is reachable, call:
-`get_domain_summary("communication")`
+`get_domain_summary("infotech")`
 This provides richer cross-domain context.
 If the MCP call fails, use this file as your orientation source.
diff --git a/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md b/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
index 2a8ec53..4a127a3 100644
--- a/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
+++ b/workplans/FLEX-WP-0012-credential-grant-authorization-surface.md
@@ -4,7 +4,7 @@ type: workplan
 title: "Authorize railiance-platform credential-grant requests"
 domain: infotech
 repo: flex-auth
-status: proposed
+status: active
 owner: codex
 topic_slug: netkingdom
 planning_priority: P3
@@ -12,7 +12,7 @@ planning_order: 120
 related_workplans:
   - RAILIANCE-WP-0005
 created: "2026-08-11"
-updated: "2026-08-11"
+updated: "2026-08-23"
 state_hub_workstream_id: "89ecdb1f-ceb0-4a50-b72d-c3dfd5fa7c73"
 ---
 
@@ -84,7 +84,7 @@ What is *actually* missing is narrower and worth stating precisely:
 
 ```task
 id: FLEX-WP-0012-T01
-status: todo
+status: progress
 priority: medium
 state_hub_task_id: "a1c9ba0c-3413-4823-9f9e-ccee09cf5d74"
 ```
@@ -122,6 +122,11 @@ Done when the decision is recorded, and railiance-platform has agreed to it —
 this one cannot be decided unilaterally, because either option changes
 something they own.
 
+Progress 2026-08-23: revalidated both repositories. The helper still emits the
+flat payload and defaults to `/credential-grants/authorize`; flex-auth still
+serves only `/v1/check`. The translation choice is therefore current, not stale.
+Request railiance-platform agreement before implementing either wire shape.
+
 ## T02 - Credential-grant policy package and fixtures
 
 ```task