diff --git a/.custodian-brief.md b/.custodian-brief.md
index 4afdcb4..bc5af4c 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,17 +2,18 @@
 # Custodian Brief — key-cape
 
 **Domain:** infotech  
-**Last synced:** 2026-10-08 19:27 UTC  
+**Last synced:** 2026-10-08 20:45 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Forgejo as a NetKingdom OIDC client, so the forge can close
-Progress: 1/3 done  |  workplan_id: `098e3e2c-a138-560e-b2d3-3a15eb49d8a9`
+Progress: 1/4 done  |  workplan_id: `098e3e2c-a138-560e-b2d3-3a15eb49d8a9`
 
 **Open tasks:**
 - ! T01 — Define what Forgejo receives  `ddcfb482`
 - ! T02 — Register the client and hand over its secret  `40ddaa29`
+- · T03 — Prove the claims for each kind of identity  `583cf1f1`
 
 ## Inbox Hygiene