diff --git a/.custodian-brief.md b/.custodian-brief.md
index 04f7313..4648c36 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-10-03 18:50 UTC  
+**Last synced:** 2026-10-03 18:52 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -45,13 +45,6 @@ Progress: 4/5 done  |  workplan_id: `9d7b04f9-3803-5613-b7a5-8bd606c77f5a`
 - ! Obtain audit-core freshness adoption  `7d2029d2`
   *(wait: audit-core must add authoritative owner and E2 freshness metadata for WH-ENG-20260822-AUDIT-E2-03; NetKingdom must not parse it from prose.)*
 
-### Make the platform-root custody record readable as a non-secret root-grant fact
-Progress: 5/6 done  |  workplan_id: `43fbb1aa-b711-5792-b72b-07cd93ca8f45`
-
-**Open tasks:**
-- ! Deliver the read path with the owner  `628e8a3b`
-  *(wait: Live empty source, consumer rollout/restart/denial and audit correlation verified. Remaining producer closure is attended current owner restore-check and governed encrypted retained-history provider upload/download/decryption evidence; no new approval or actual grant required.)*
-
 ### Define an execution-attribution receipt for Railiance runs
 Progress: 1/2 done  |  workplan_id: `e2533f3a-aa43-59b3-bff3-8e64b6149487`
 
@@ -73,6 +66,13 @@ Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
 - ! T08 - Final deletion and closure  `42a3b4c0`
   *(wait: Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill before destructive CoulombCore cleanup.)*
 
+### Make the platform-root custody record readable as a non-secret root-grant fact
+Progress: 5/6 done  |  workplan_id: `43fbb1aa-b711-5792-b72b-07cd93ca8f45`
+
+**Open tasks:**
+- ! Deliver the read path with the owner  `628e8a3b`
+  *(wait: Live empty source, consumer rollout/restart/denial and audit correlation verified. Remaining producer closure is attended current owner restore-check and governed encrypted retained-history provider upload/download/decryption evidence; no new approval or actual grant required.)*
+
 ---
 ## MCP Orientation (when available)