diff --git a/.custodian-brief.md b/.custodian-brief.md
index 817708c..2d7a5c1 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,18 +2,16 @@
 # Custodian Brief — key-cape
 
 **Domain:** infotech  
-**Last synced:** 2026-08-09 18:52 UTC  
+**Last synced:** 2026-08-09 19:56 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Registration handoff and client-aware MFA policy
-Progress: 0/4 done  |  workplan_id: `70b78f21-be6d-4d6c-a537-037c38b2884a`
+Progress: 2/4 done  |  workplan_id: `70b78f21-be6d-4d6c-a537-037c38b2884a`
 
 **Open tasks:**
-- · T01 - Add a safe registration handoff  `31627b02`
-- · T02 - Replace global MFA with client-aware minimum assurance  `c2b56182`
-- · T03 - Support explicit step-up and fresh authentication  `bfa56396`
+- ► T02 - Replace global MFA with client-aware minimum assurance  `c2b56182`
 - · T04 - Prove policy isolation and compatibility  `d4208f77`
 
 ---