diff --git a/.custodian-brief.md b/.custodian-brief.md
index d3dc54c..7c79c74 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-07-28 10:59 UTC  
+**Last synced:** 2026-07-28 14:47 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -13,20 +13,20 @@ Progress: 1/8 done  |  workplan_id: `c652e4ba-6520-4b30-966f-4fb5659439db`
 **Open tasks:**
 - ! T04 - Integrate authorization, email, audit, and events  `6ce33c92`
 - ! T06 - Prove role-scoped administration and failure safety  `96a7cd2b`
-- ! T07 - Complete KEY-WP-0004 through the reusable portal  `a574dcec`
 - ! T08 - Document enterprise integration extension points  `7ef8e1f5`
 - ► T02 - Implement the NetKingdom identity provisioning adapter  `89fe51aa`
 - ► T03 - Integrate KeyCape login, claims, and MFA handoffs  `76289890`
 - ► T05 - Deploy on reef-railiance  `4ef00e05`
+- ► T07 - Complete KEY-WP-0004 through the reusable portal  `a574dcec`
 
 ### Cut over NetKingdom identity to railiance01 and retire CoulombCore
 Progress: 3/8 done  |  workplan_id: `3dadddeb-4cec-48e2-9c2c-788b26dd6e93`
 
 **Open tasks:**
-- ! T05 - Run full pre-cutover identity conformance  `5b01e471`
 - ! T07 - Retire CoulombCore identity workloads reversibly  `75d160e6`
 - ! T08 - Final deletion and closure  `9f209f15`
 - ► T01 - Freeze the migration contract and inventory both stacks  `fe55a2c2`
+- ► T05 - Run full pre-cutover identity conformance  `5b01e471`
 - ► T06 - Cut over remaining DNS with monitored rollback  `00bfa48b`
 
 ## Inbox Hygiene