diff --git a/.custodian-brief.md b/.custodian-brief.md
index 94c337e..d4aef6c 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-09-07 06:46 UTC  
+**Last synced:** 2026-09-07 06:47 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -14,12 +14,6 @@ Progress: 3/5 done  |  workplan_id: `63665674-6880-593e-96e6-bab3211b1352`
 - ► T03 — Implement a non-printing, non-stale rotation path  `f0f6d6c3`
 - ► T05 — Prove replacement, predecessor rejection, and cleanup  `41e55d5c`
 
-### Publish the NetKingdom emission-cadence security profile
-Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
-
-**Open tasks:**
-- ! Bind and hand off the published contract  `e3fbc8b8`
-
 ### Reconcile reef placement and security-zone canon dependencies
 Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 
@@ -28,6 +22,12 @@ Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 - ! T03 — Reconcile reef ceilings mechanically  `e3f0bb0f`
 - ! T06 — Resolve the `DataClassification` mismatch  `bf8b3e1d`
 
+### Publish the NetKingdom emission-cadence security profile
+Progress: 4/5 done  |  workplan_id: `04685f94-1991-5e62-80d2-5669913e99fc`
+
+**Open tasks:**
+- ! Bind and hand off the published contract  `e3fbc8b8`
+
 ### Implement deterministic posture and evidence feedback
 Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
 
@@ -48,18 +48,18 @@ Progress: 2/4 done  |  workplan_id: `516ee5b9-685b-5986-88d2-bde66c2ba96c`
 - ! T03 — Apply and prove the live OpenBao role addition  `73b77110`
 - ! T04 — Return attended-login evidence to Railiance Platform  `f62bda4a`
 
-### Cut over NetKingdom identity to railiance01 and retire CoulombCore
-Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
-
-**Open tasks:**
-- ! T08 - Final deletion and closure  `42a3b4c0`
-
 ### Make the SSO/MFA verification actually verify
 Progress: 3/4 done  |  workplan_id: `c87e142c-4eda-5c1b-84a9-ee5a848f3f63`
 
 **Open tasks:**
 - ! Assert the property, not the objects  `9b5d8034`
 
+### Cut over NetKingdom identity to railiance01 and retire CoulombCore
+Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
+
+**Open tasks:**
+- ! T08 - Final deletion and closure  `42a3b4c0`
+
 ---
 ## MCP Orientation (when available)