diff --git a/.custodian-brief.md b/.custodian-brief.md
index a6bf703..d3bccf0 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -1,13 +1,21 @@
 <!-- custodian-brief: generated by fix-consistency — do not edit manually -->
 # Custodian Brief — net-kingdom
 
-**Domain:** communication  
-**Last synced:** 2026-07-22 08:44 UTC  
+**Domain:** infotech  
+**Last synced:** 2026-07-22 13:20 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
-*(none — repo may need first-session setup)*
+### Activity-core ops/Temporal UI least-privilege SSO
+Progress: 0/5 done  |  workplan_id: `3e40e29a-a13a-47b6-9575-4fdc7024af6a`
+
+**Open tasks:**
+- · T01 — LLDAP group `activity-core-operators` in bootstrap  `50d59099`
+- · T02 — Operator membership runbook  `e8d6dae5`
+- · T03 — Authelia domain rules for activity + temporal hosts  `71bfd7ea`
+- · T04 — Live apply and verification matrix  `f74a2a59`
+- · T05 — Close loop with intakes and activity-core  `a1acd507`
 
 ## Inbox Hygiene
 
@@ -19,6 +27,6 @@
 ## MCP Orientation (when available)
 
 If the state-hub MCP server is reachable, call:
-`get_domain_summary("communication")`
+`get_domain_summary("infotech")`
 This provides richer cross-domain context.
 If the MCP call fails, use this file as your orientation source.