diff --git a/.custodian-brief.md b/.custodian-brief.md
index 264e887..c727293 100644
--- a/.custodian-brief.md
+++ b/.custodian-brief.md
@@ -2,7 +2,7 @@
 # Custodian Brief — net-kingdom
 
 **Domain:** infotech  
-**Last synced:** 2026-09-28 21:47 UTC  
+**Last synced:** 2026-09-28 21:51 UTC  
 **State Hub:** http://127.0.0.1:8000 *(adjust if running on a remote machine)*
 
 ## Active Workstreams
@@ -48,8 +48,11 @@ Progress: 3/6 done  |  workplan_id: `965ad365-6b81-50a1-a2a3-2d0c1fcce0b4`
 
 **Open tasks:**
 - ! T02 — Extend provider declarations to reefs  `5b35b646`
+  *(wait: Proposal to repo-manager: extend Decision 5.5 provider declaration to substrate providers.)*
 - ! T03 — Reconcile reef ceilings mechanically  `e3f0bb0f`
+  *(wait: Mechanical join of reef ceilings to consumer V declarations waits on T02.)*
 - ! T06 — Resolve the `DataClassification` mismatch  `bf8b3e1d`
+  *(wait: DataClassification vocabulary mismatch between rapp-policy-nexus (public) and ops-warden dataclass_floor must be resolved with those owners.)*
 
 ### Let workloads require MFA for all or part of their features
 Progress: 1/2 done  |  workplan_id: `3f702215-704b-5788-8ca0-b8b9ba2dd3f8`
@@ -63,6 +66,7 @@ Progress: 7/8 done  |  workplan_id: `d76ddccc-00c8-548a-b141-2cd660fa38da`
 
 **Open tasks:**
 - ! T08 - Final deletion and closure  `42a3b4c0`
+  *(wait: Explicit approval, rollback retention window expiry and one successful railiance01 restore/restart drill before destructive CoulombCore cleanup.)*
 
 ### Take in the flex-auth to access-engine repository-coordinate rename
 Progress: 2/4 done  |  workplan_id: `284a8ac2-61dc-5bee-b74a-0a62d9808edb`