diff --git a/.custodian-brief.md b/.custodian-brief.md
index eda46e2..bd0d1ac 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,19 +2,17 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-08-23 12:19 UTC  
+**Last synced:** 2026-08-23 12:44 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Contain and rotate the exposed KeyCape credential bundle
-Progress: 1/5 done  |  workplan_id: `63665674-6880-593e-96e6-bab3211b1352`
+Progress: 3/5 done  |  workplan_id: `63665674-6880-593e-96e6-bab3211b1352`
 
 **Open tasks:**
-- ! T03 — Implement a non-printing, non-stale rotation path  `f0f6d6c3`
-- ! T04 — Execute the governed replacement cutover  `751cca48`
-- ! T05 — Prove replacement, predecessor rejection, and cleanup  `41e55d5c`
-- ► T02 — Agree the value-safe rotation and issuer-continuity contract  `c5ca817c`
+- ► T03 — Implement a non-printing, non-stale rotation path  `f0f6d6c3`
+- ► T05 — Prove replacement, predecessor rejection, and cleanup  `41e55d5c`
 
 ### Reconcile reef placement and security-zone canon dependencies
 Progress: 3/6 done  |  workplan_id: `a30a33e4-f980-4934-9efb-d61a75e6ae81`