diff --git a/.custodian-brief.md b/.custodian-brief.md
index 7c79c74..ab19271 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,13 +2,13 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-07-28 14:47 UTC  
+**Last synced:** 2026-07-29 20:16 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
 
 ### Integrate and deploy the user-engine onboarding portal
-Progress: 1/8 done  |  workplan_id: `c652e4ba-6520-4b30-966f-4fb5659439db`
+Progress: 2/8 done  |  workplan_id: `c652e4ba-6520-4b30-966f-4fb5659439db`
 
 **Open tasks:**
 - ! T04 - Integrate authorization, email, audit, and events  `6ce33c92`
@@ -17,16 +17,14 @@ Progress: 1/8 done  |  workplan_id: `c652e4ba-6520-4b30-966f-4fb5659439db`
 - ► T02 - Implement the NetKingdom identity provisioning adapter  `89fe51aa`
 - ► T03 - Integrate KeyCape login, claims, and MFA handoffs  `76289890`
 - ► T05 - Deploy on reef-railiance  `4ef00e05`
-- ► T07 - Complete KEY-WP-0004 through the reusable portal  `a574dcec`
 
 ### Cut over NetKingdom identity to railiance01 and retire CoulombCore
-Progress: 3/8 done  |  workplan_id: `3dadddeb-4cec-48e2-9c2c-788b26dd6e93`
+Progress: 4/8 done  |  workplan_id: `3dadddeb-4cec-48e2-9c2c-788b26dd6e93`
 
 **Open tasks:**
 - ! T07 - Retire CoulombCore identity workloads reversibly  `75d160e6`
 - ! T08 - Final deletion and closure  `9f209f15`
 - ► T01 - Freeze the migration contract and inventory both stacks  `fe55a2c2`
-- ► T05 - Run full pre-cutover identity conformance  `5b01e471`
 - ► T06 - Cut over remaining DNS with monitored rollback  `00bfa48b`
 
 ## Inbox Hygiene