diff --git a/.custodian-brief.md b/.custodian-brief.md
index 5a5ce7a..3836784 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,22 +2,17 @@
 # Custodian Brief — key-cape
 
 **Domain:** infotech  
-**Last synced:** 2026-07-27 18:18 UTC  
+**Last synced:** 2026-07-27 18:53 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Binky Hedgehog GmbH as first NetKingdom tenant + qonto runtime workload identity
-Progress: 0/7 done  |  workplan_id: `ad6fa711-ba5b-4e7d-86e3-641f9acaf853`
+Progress: 5/7 done  |  workplan_id: `ad6fa711-ba5b-4e7d-86e3-641f9acaf853`
 
 **Open tasks:**
-- ► Task: Register a workload-identity OIDC client for qonto-assistant callers  `fbe9d2e0`
-- ► Task: Route client_secret custody through secrets-engine + OpenBao  `80901eb3`
-- ► Task: Register the credential lane with ops-warden  `a91326a6`
-- · Task: Confirm tenant identifier and provision the tenant plane  `ec65d1be`
+- ! Task: Closure review  `9511a7ef`
 - · Task: Provision bernd.worsch@binky-hedgehog.com as tenant-admin  `b5cb4497`
-- · Task: automation@binky-hedgehog.com service identity (deferred)  `d3460058`
-- · Task: Closure review  `9511a7ef`
 
 ---
 ## MCP Orientation (when available)